Static task
static1
Behavioral task
behavioral1
Sample
84d3c9092d0c5bee272cec077cd2d2a517de85aeb87c3b4a2ea76f8b3dbe9d93.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84d3c9092d0c5bee272cec077cd2d2a517de85aeb87c3b4a2ea76f8b3dbe9d93.exe
Resource
win10v2004-20220901-en
General
-
Target
84d3c9092d0c5bee272cec077cd2d2a517de85aeb87c3b4a2ea76f8b3dbe9d93
-
Size
210KB
-
MD5
1bd71a9da5c080f7f25f4e0d0fa63964
-
SHA1
0802e64d64ae98e4501512391cd2d4a40c38b09b
-
SHA256
84d3c9092d0c5bee272cec077cd2d2a517de85aeb87c3b4a2ea76f8b3dbe9d93
-
SHA512
9060a8bb7c552b166771c9b7550bbad94600c076d0938b8fddc16ede4f0418bb3a0eeefb40650b89a7ba1cdfaf82b7520230df85619acde7e308748b7060dbfa
-
SSDEEP
3072:yWiQLpacsVzsCDQxgO3syvNWAFqWKmA5g48xqMi7LQfDY0L7VAj2eP/pL7k04g:3LMrzdK9Lf7k8xic7/7VAtPJ7k0B
Malware Config
Signatures
Files
-
84d3c9092d0c5bee272cec077cd2d2a517de85aeb87c3b4a2ea76f8b3dbe9d93.exe windows x86
5f879e0a19ebf5c9a565e8bedc9f3aa2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
lstrcpyA
WideCharToMultiByte
GetTickCount
GetCurrentProcessId
GetLocaleInfoW
GetSystemTimeAsFileTime
SystemTimeToFileTime
SetLastError
FindResourceA
GetOEMCP
MultiByteToWideChar
GetLocalTime
LoadLibraryW
CloseHandle
lstrlenA
QueryDosDeviceA
SetUnhandledExceptionFilter
GetVolumeInformationA
GetEnvironmentStringsW
HeapAlloc
HeapFree
QueryPerformanceCounter
GetProcessHeap
CreateFileA
lstrcmpA
LockResource
rasctrs
CloseRasPerformanceData
OpenRasPerformanceData
raschap
RasCpGetInfo
RasCpEnumProtocolIds
RasEapGetInfo
rasman
IsRasmanProcess
RasAddConnectionPort
RasAllocateRoute
RasActivateRouteEx
rasapi32
RasValidateEntryNameW
DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ