Static task
static1
Behavioral task
behavioral1
Sample
b90e7de666d7a037162cc730fb859c109ea440906eac16ae5a5ea696be11a233.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b90e7de666d7a037162cc730fb859c109ea440906eac16ae5a5ea696be11a233.exe
Resource
win10v2004-20221111-en
General
-
Target
b90e7de666d7a037162cc730fb859c109ea440906eac16ae5a5ea696be11a233
-
Size
269KB
-
MD5
14b46e1bd571a7555c744f4df70cdf10
-
SHA1
864ad1157eb29cafdab2ce924cbc078fee50dee7
-
SHA256
b90e7de666d7a037162cc730fb859c109ea440906eac16ae5a5ea696be11a233
-
SHA512
11a984e1e8645ac6d5cceb2be770d96b3a1e1ce2ee2e29ce7748b6e95486eb05d4df3fa11334714f6acdb8436bd3e90676a876fccae5475b1e004719cd39f617
-
SSDEEP
6144:P73AZTgRn9aWIIiEpJMqTh7dVJ1pvtm99iWEM:P7KkygPhRVJ1Pmv4M
Malware Config
Signatures
Files
-
b90e7de666d7a037162cc730fb859c109ea440906eac16ae5a5ea696be11a233.exe windows x86
03eb9c8a00fa7d3ff8d4746d38020a75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hnetcfg
HNetGetFirewallSettingsPage
HNetFreeSharingServicesPage
HNetSharedAccessSettingsDlg
HNetDeleteRasConnection
HNetGetSharingServicesPage
HNetSharingAndFirewallSettingsDlg
kernel32
FindFirstFileW
GetModuleHandleA
LocalAlloc
GetEnvironmentStringsA
GetFileType
DeleteFileA
GetStartupInfoA
GetLocalTime
FindNextFileW
GetStdHandle
ReadFile
ResetEvent
GetFileAttributesW
CloseHandle
GetDateFormatW
SetFilePointer
GetLocaleInfoW
LocalFree
FreeLibrary
ResetWriteWatch
RequestDeviceWakeup
LoadLibraryW
CreateFileW
GlobalAlloc
FormatMessageW
GetTimeFormatW
WriteConsoleW
MultiByteToWideChar
RequestWakeupLatency
GetCommandLineW
SetLastError
VerifyVersionInfoW
GetSystemDefaultLCID
iyuv_32
AboutDialogProc
DriverDialogProc
DllMain
DriverProc
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ