Static task
static1
Behavioral task
behavioral1
Sample
a98e6190dcfd71dc2d2afad08128d4cd74356b9291907dc2bc4a110fadf54bb4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a98e6190dcfd71dc2d2afad08128d4cd74356b9291907dc2bc4a110fadf54bb4.exe
Resource
win10v2004-20220812-en
General
-
Target
a98e6190dcfd71dc2d2afad08128d4cd74356b9291907dc2bc4a110fadf54bb4
-
Size
209KB
-
MD5
19e9db418ae903f34ff3acdc7479beac
-
SHA1
80b247e1d34c0b1afaaf16f0d4873638d2cae0af
-
SHA256
a98e6190dcfd71dc2d2afad08128d4cd74356b9291907dc2bc4a110fadf54bb4
-
SHA512
2800e6c93763f057b179296badaab8603beca26678cbaa6696c7bf18a1b7d7eaeb220fee8bbd276fdb8a1d8ea0001bf04df3bb6a2f03cba919066a3ed5edcb51
-
SSDEEP
3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+5:IXPbhHFpSp/9xdY9Siv96YvlUBl/zCH
Malware Config
Signatures
Files
-
a98e6190dcfd71dc2d2afad08128d4cd74356b9291907dc2bc4a110fadf54bb4.exe windows x86
06ba45096e234d3614a93dd22606d68e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource
rasman
RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA
rasapi32
DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW
raschap
RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds
rasctrs
OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 17KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ