Static task
static1
Behavioral task
behavioral1
Sample
3a313789a2d726909456047230a0b5c7f15eef0e92e079bdf3ccd5f1d4e3d792.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a313789a2d726909456047230a0b5c7f15eef0e92e079bdf3ccd5f1d4e3d792.exe
Resource
win10v2004-20220812-en
General
-
Target
3a313789a2d726909456047230a0b5c7f15eef0e92e079bdf3ccd5f1d4e3d792
-
Size
209KB
-
MD5
179bdd36020bee5bd6d5c0d1108d6068
-
SHA1
2fd45211650e80e413002b2e82f97eabae4631b8
-
SHA256
3a313789a2d726909456047230a0b5c7f15eef0e92e079bdf3ccd5f1d4e3d792
-
SHA512
184ff3ccebdf9804dc681bec9a78ee180b1ae1caf5136e93d520218562796fb2b1e0f6f28592fa1834514a8941478abc6443311ec7509bf2d4674693d2384874
-
SSDEEP
3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+G:IXPbhHFpSp/9xdY9Siv96YvlUBl/zC5a
Malware Config
Signatures
Files
-
3a313789a2d726909456047230a0b5c7f15eef0e92e079bdf3ccd5f1d4e3d792.exe windows x86
06ba45096e234d3614a93dd22606d68e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource
rasman
RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA
rasapi32
DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW
raschap
RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds
rasctrs
OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 17KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ