Static task
static1
Behavioral task
behavioral1
Sample
7c29f8e7f097b7c1dc9db323dbcbe96f83c6532b0edc6fead8889da2af22eb51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c29f8e7f097b7c1dc9db323dbcbe96f83c6532b0edc6fead8889da2af22eb51.exe
Resource
win10v2004-20220812-en
General
-
Target
7c29f8e7f097b7c1dc9db323dbcbe96f83c6532b0edc6fead8889da2af22eb51
-
Size
307KB
-
MD5
84f9056fe48904b8af909ac827c3dfc0
-
SHA1
d253a1a69ed3bb02adc583ad8ea7e37eb85ba170
-
SHA256
7c29f8e7f097b7c1dc9db323dbcbe96f83c6532b0edc6fead8889da2af22eb51
-
SHA512
e8e0814d2b2704d1502c0dc97af4c515cd812afa4047c61221ba5dc611888e97a83a37bcfcdadfdfea1c3ca37348e66c2dac2e9fceaad8fcf30961569b350d57
-
SSDEEP
6144:0Krq91FOgz+xtbyOmc17urV6kZ4WgX1814ZpqnqivRnR:0/9Tzotb/ap6L/e1r
Malware Config
Signatures
Files
-
7c29f8e7f097b7c1dc9db323dbcbe96f83c6532b0edc6fead8889da2af22eb51.exe windows x86
74840bad0392b758ba050021d048dbc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetProcessHeap
GetCurrentThread
GetPrivateProfileSectionA
lstrlenA
DeleteFileA
HeapFree
LoadLibraryW
GetFileAttributesA
DeviceIoControl
HeapDestroy
GetStringTypeA
TlsGetValue
ResumeThread
VirtualProtectEx
GetDriveTypeA
DeviceIoControl
OpenMutexW
ClearCommBreak
GetPrivateProfileIntW
CreateEventW
rasapi32
DwCloneEntry
DwRasUninitialize
RasDialA
RasDialA
DwRasUninitialize
RasDialA
DwEnumEntryDetails
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails
DwCloneEntry
DwEnumEntryDetails
RasDeleteEntryA
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileTypeA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ