Static task
static1
Behavioral task
behavioral1
Sample
e3e9d89d13f96135a918503610bae4cba2b0ce78b50de7d936819319c6fc074e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3e9d89d13f96135a918503610bae4cba2b0ce78b50de7d936819319c6fc074e.exe
Resource
win10v2004-20220812-en
General
-
Target
e3e9d89d13f96135a918503610bae4cba2b0ce78b50de7d936819319c6fc074e
-
Size
308KB
-
MD5
373131627d59904319a367d824d65920
-
SHA1
90c8490dcbb283f6d107f8af4ddc74ddd3150296
-
SHA256
e3e9d89d13f96135a918503610bae4cba2b0ce78b50de7d936819319c6fc074e
-
SHA512
d9e95ceceb409275188f2ee1100ce9a590d6f23b4c53c86c7d864ca6d16c67f2d1167a669b250cee74fae358dd210930e3ec5b90d6ed92c6e456a0f4d30127c3
-
SSDEEP
6144:c91FdehNESVSiieslAGoBv2/ph1WrRCeW0uiRYYqY:c9xehNgiiNJRzbeWDt7
Malware Config
Signatures
Files
-
e3e9d89d13f96135a918503610bae4cba2b0ce78b50de7d936819319c6fc074e.exe windows x86
ff2fa936780d2136cbff7c75a21e4baf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
lstrlenA
ResumeThread
HeapDestroy
ClearCommBreak
GetProcessHeap
GetPrivateProfileIntW
SetLastError
DeviceIoControl
CreateMutexA
GetCurrentThread
GetStringTypeW
DeleteFileA
TlsGetValue
LoadLibraryW
GetFileAttributesW
GetDriveTypeA
HeapFree
GetPrivateProfileSectionA
VirtualProtectEx
CreateEventW
rasapi32
RasDeleteEntryA
DwCloneEntry
DwEnumEntryDetails
DwRasUninitialize
DwEnumEntryDetails
RasDialA
DwCloneEntry
RasDeleteEntryA
RasDialA
DwEnumEntryDetails
DwRasUninitialize
DwRasUninitialize
RasDialA
pdh
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ