Static task
static1
Behavioral task
behavioral1
Sample
1632a2309804dd14ce41563ed66d2522ddb08ec1f3e2434539c6ec0770a3a729.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1632a2309804dd14ce41563ed66d2522ddb08ec1f3e2434539c6ec0770a3a729.exe
Resource
win10v2004-20220812-en
General
-
Target
1632a2309804dd14ce41563ed66d2522ddb08ec1f3e2434539c6ec0770a3a729
-
Size
493KB
-
MD5
93b989cceb7c68aa46112b0009aebd50
-
SHA1
42740ca43a49c9e93d5204944b519d94c55499c7
-
SHA256
1632a2309804dd14ce41563ed66d2522ddb08ec1f3e2434539c6ec0770a3a729
-
SHA512
c9ec4fc26fbe6b59061d01a7778b9c51ef57092753a91edca11793f5745c4ad6f4691454aff2f3a6b3c17823c3d9e740812b9a0ed4ed029f06a776c01996ff47
-
SSDEEP
12288:fVqyY4jW15e994VgSYI+szEBG89/o0fxVJCW:fRig94iSUo0DoW
Malware Config
Signatures
Files
-
1632a2309804dd14ce41563ed66d2522ddb08ec1f3e2434539c6ec0770a3a729.exe windows x86
fc4576a6de0665bb5c4256d8a947fbb6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
kernel32
FreeLibrary
ExpandEnvironmentStringsW
GetModuleFileNameW
MultiByteToWideChar
LoadLibraryA
GetProcAddress
LocalFree
LocalAlloc
GetModuleHandleA
GetOEMCP
VirtualFree
GetTimeZoneInformation
GetCPInfo
WideCharToMultiByte
GetLastError
GetWindowsDirectoryW
msvcrt
_controlfp
_XcptFilter
_adjust_fdiv
_except_handler3
__winitenv
strstr
sprintf
_cexit
__wgetmainargs
__setusermatherr
_wcsicmp
_exit
printf
_initterm
_stricmp
_c_exit
wcscpy
__p__fmode
rasdlg
RasAutodialQueryDlgW
RasPhonebookDlgW
RasDialDlgW
Sections
.gdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.685498 Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ