Static task
static1
Behavioral task
behavioral1
Sample
25dc1f4eb1418d1f0ac1dc7003bdd5d7c1da7d522c14d00537a01c2f9b642720.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25dc1f4eb1418d1f0ac1dc7003bdd5d7c1da7d522c14d00537a01c2f9b642720.exe
Resource
win10v2004-20220901-en
General
-
Target
25dc1f4eb1418d1f0ac1dc7003bdd5d7c1da7d522c14d00537a01c2f9b642720
-
Size
800KB
-
MD5
0f859b3e8503da4e5a47bef85c7930d6
-
SHA1
d58767d1d274060043f91f5d9f8e4c49d5c420cc
-
SHA256
25dc1f4eb1418d1f0ac1dc7003bdd5d7c1da7d522c14d00537a01c2f9b642720
-
SHA512
760f9d061ef38af0d829e0e1619acbcdb02e46218bf051506d7e2bd8814b30d33bd0b19987adfd06fd72653df105da149f31dcf02130c509dcbfaf3dbf5fa5f6
-
SSDEEP
24576:2A7CeQ323PkKVhruwj38u8Y/7qWiMzJoAbTQ:lCeQ3yPkouNu8Ou2
Malware Config
Signatures
Files
-
25dc1f4eb1418d1f0ac1dc7003bdd5d7c1da7d522c14d00537a01c2f9b642720.exe windows x86
411c0d0037d842d0ddc6831890977a36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
ResumeThread
LoadLibraryW
TlsGetValue
SetLastError
HeapDestroy
lstrlenA
GetFileAttributesA
GetProcessHeap
DeviceIoControl
DeviceIoControl
GetDriveTypeA
OpenMutexW
GetStringTypeA
DeleteFileA
VirtualProtectEx
HeapFree
GetCurrentThread
GetPrivateProfileIntW
ClearCommBreak
CreateEventW
rasapi32
DwRasUninitialize
DwEnumEntryDetails
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails
RasDialA
DwRasUninitialize
RasDialA
RasDeleteEntryA
DwCloneEntry
DwEnumEntryDetails
RasDialA
DwCloneEntry
pdh
PdhCloseLog
PdhGetLogFileSize
PdhGetLogFileTypeA
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ