Static task
static1
Behavioral task
behavioral1
Sample
5a1c7856331f475b2fd69f70a9fec56ea4ef9de6a2150ba7a9af29f1180ff23c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5a1c7856331f475b2fd69f70a9fec56ea4ef9de6a2150ba7a9af29f1180ff23c.exe
Resource
win10v2004-20220812-en
General
-
Target
5a1c7856331f475b2fd69f70a9fec56ea4ef9de6a2150ba7a9af29f1180ff23c
-
Size
210KB
-
MD5
059919e21b46f6d2841432cc06640f9e
-
SHA1
f85e62ade337b7ce6de991db7f45c854704f94d8
-
SHA256
5a1c7856331f475b2fd69f70a9fec56ea4ef9de6a2150ba7a9af29f1180ff23c
-
SHA512
466a938da7c06db81967384eaca6c827fac9d3af8a717b993714fa529ecdbb0d9600bbe7f2a282afb7d677bcbb2d2d3bea50da2b9d1c56bab8e95132319fb456
-
SSDEEP
3072:VUIiEDnBIgyRaq6MYfUwq+VoeqITaBwcysS4umRPI9elF2vRpEMnHW7:XpDnDlvUwq+avILzkumu7vO
Malware Config
Signatures
Files
-
5a1c7856331f475b2fd69f70a9fec56ea4ef9de6a2150ba7a9af29f1180ff23c.exe windows x86
db8c24328f14bb0cabdb74af26eda055
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
QueryPerformanceCounter
GetOEMCP
lstrcpyA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLocaleInfoW
MultiByteToWideChar
LockResource
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileA
GetSystemTimeAsFileTime
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
GetLocalTime
FindResourceA
GetVolumeInformationA
lstrlenA
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
SystemTimeToFileTime
GetProcessHeap
rasman
RasAddConnectionPort
RasActivateRouteEx
RasAllocateRoute
IsRasmanProcess
rasctrs
CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData
advapi32
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
rasapi32
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
RasValidateEntryNameA
raschap
RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 21KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ