Static task
static1
Behavioral task
behavioral1
Sample
48a30df7e848a1f64128e09c7631dd9a5943149775d9c4411b812892b58fdeec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48a30df7e848a1f64128e09c7631dd9a5943149775d9c4411b812892b58fdeec.exe
Resource
win10v2004-20220812-en
General
-
Target
48a30df7e848a1f64128e09c7631dd9a5943149775d9c4411b812892b58fdeec
-
Size
133KB
-
MD5
5c3c258fef6d4f0779dbfe4b1a6119f0
-
SHA1
5a30bcc51534740a30267431da4079ee8415b214
-
SHA256
48a30df7e848a1f64128e09c7631dd9a5943149775d9c4411b812892b58fdeec
-
SHA512
1976338ef73c9684c198a38779dde2a32ade9906f1e072b9750fde88a21ce55ed4f56b39dc6fa3258e153d99c147ed18d0eeba11b57d5cecaf5338fbaeedcb9b
-
SSDEEP
3072:jJNCfzkIpg2Wwgj1rl43Hy2d33FK0i5hkk3LZbXm6VOMWm:NA4Ixgjn4Xy2dsr5h5NaqOTm
Malware Config
Signatures
Files
-
48a30df7e848a1f64128e09c7631dd9a5943149775d9c4411b812892b58fdeec.exe windows x86
0d9f3f385f4037e48c4e42cda81a1450
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetCurrentThread
GetPrivateProfileIntW
GetStringTypeW
GetFileAttributesA
lstrlenA
ResumeThread
VirtualProtectEx
HeapDestroy
SetLastError
DeleteFileA
DeviceIoControl
GetPrivateProfileSectionA
CreateMutexA
ClearCommBreak
GetDriveTypeA
GetProcessHeap
HeapFree
CreateEventW
TlsGetValue
LoadLibraryW
rasapi32
RasDialA
RasDeleteEntryA
DwRasUninitialize
RasDialA
DwCloneEntry
DwEnumEntryDetails
DwEnumEntryDetails
DwRasUninitialize
DwRasUninitialize
DwEnumEntryDetails
RasDeleteEntryA
RasDialA
DwCloneEntry
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileSize
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ