Static task
static1
Behavioral task
behavioral1
Sample
b62d04d7c9607fb24c5a65541fbc92d2d87ffbc235e4f89fadac77fc1909c9af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b62d04d7c9607fb24c5a65541fbc92d2d87ffbc235e4f89fadac77fc1909c9af.exe
Resource
win10v2004-20220901-en
General
-
Target
b62d04d7c9607fb24c5a65541fbc92d2d87ffbc235e4f89fadac77fc1909c9af
-
Size
211KB
-
MD5
0f11c4e5aa4871bfacfad55917999230
-
SHA1
57abfc22ce9dd18b5bf7dc4a1b2803fd962a8b59
-
SHA256
b62d04d7c9607fb24c5a65541fbc92d2d87ffbc235e4f89fadac77fc1909c9af
-
SHA512
695d909f9a9bc2972e8bfb664c669d41b5c825cc3e47397c2af75f6003953b71b389684c5ea7fc25cb1bac0ddbb517ba1a74322ed470d7b662a76e8d86f172e5
-
SSDEEP
3072:wfScor+JLpBm4J0hZZ2GBUUlSIQsXb2kjfz9rso0m2afyugqFCCbZSuUtsooqI3T:A7UDh5zQsXbhlA9mDyd3LuUCooT2UkW
Malware Config
Signatures
Files
-
b62d04d7c9607fb24c5a65541fbc92d2d87ffbc235e4f89fadac77fc1909c9af.exe windows x86
93813980d0c152322cfe4fcf026392ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasdlg
RouterEntryDlgW
GetRasDialOutProtocols
RasSrvAddPropPages
RasAutodialQueryDlgA
RasSrvInitializeService
RasEntryDlgA
RasPhonebookDlgW
RasSrvAllowConnectionsConfig
RasUserPrefsDlg
RasSrvIsConnectionConnected
RasSrvHangupConnection
RasUserEnableManualDial
RasAutodialQueryDlgW
RasDialDlgW
RasEntryDlgW
RasDialDlgA
RasSrvEnumConnections
RasSrvIsServiceRunning
RasUserGetManualDial
RasPhonebookDlgA
DwTerminalDlg
RasSrvCleanupService
RouterEntryDlgA
kernel32
MultiByteToWideChar
WideCharToMultiByte
LockResource
GetEnvironmentStringsW
FindResourceA
lstrcpyA
CreateFileA
LoadLibraryW
lstrcmpA
GetLocaleInfoW
HeapFree
GetSystemTimeAsFileTime
FreeResource
SystemTimeToFileTime
QueryDosDeviceA
LoadResource
GetVolumeInformationA
CloseHandle
HeapAlloc
GetSystemDefaultLCID
GetLocalTime
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcessId
lstrlenA
QueryPerformanceCounter
DeviceIoControl
GetTickCount
GetUserDefaultLCID
GetOEMCP
GetProcessHeap
GetCurrentProcess
advapi32
RegOpenKeyExA
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
rasctrs
CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData
raschap
RasCpEnumProtocolIds
RasCpGetInfo
RasEapGetInfo
rasapi32
RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
rasman
IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAddNotification
RasAllocateRoute
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 18KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ