Static task
static1
Behavioral task
behavioral1
Sample
55775ad6ebd6eb9b6f0f166678d89d13888d571dc5d0b094a58b6e5f16a699b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
55775ad6ebd6eb9b6f0f166678d89d13888d571dc5d0b094a58b6e5f16a699b2.exe
Resource
win10v2004-20220901-en
General
-
Target
55775ad6ebd6eb9b6f0f166678d89d13888d571dc5d0b094a58b6e5f16a699b2
-
Size
28KB
-
MD5
05e6e33d42591385489d99360689a24a
-
SHA1
6cf1357e529173929aa4c142e14642659f19eaca
-
SHA256
55775ad6ebd6eb9b6f0f166678d89d13888d571dc5d0b094a58b6e5f16a699b2
-
SHA512
ae386a7aa3c3fb8ffc831a05f439223716e4f23362b3e370494a4c02c167364428395134f7d1d0d0d88e90135e32156d9c49f5b7536eb4daa9cabf148ca3483f
-
SSDEEP
384:1BPPBqUxYv5v6t+eyWcgPaSfgWh70w4w4xbSjr0W6Ul7q3:1BPDxkeyCPaSfgWh70wtANM
Malware Config
Signatures
Files
-
55775ad6ebd6eb9b6f0f166678d89d13888d571dc5d0b094a58b6e5f16a699b2.exe windows x86
0677263bcf079777becddaaf0c017104
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CompareStringA
AttachConsole
CompareStringW
ContinueDebugEvent
ConvertDefaultLocale
CreateJobObjectW
ReadConsoleOutputW
IsDebuggerPresent
Beep
_lopen
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
MulDiv
BackupWrite
GetTickCount
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
rasapi32
RasEnumEntriesA
DDMGetPhonebookInfo
DwCloneEntry
RasAutoDialSharedConnection
RasAutodialAddressToNetwork
RasAutodialEntryToNetwork
RasClearConnectionStatistics
RasClearLinkStatistics
RasConnectionNotificationA
RasConnectionNotificationW
RasCreatePhonebookEntryA
RasCreatePhonebookEntryW
RasDeleteEntryA
RasDeleteEntryW
RasDeleteSubEntryA
RasDeleteSubEntryW
RasDialA
RasDialW
RasEditPhonebookEntryA
RasEditPhonebookEntryW
RasEnumAutodialAddressesA
RasEnumAutodialAddressesW
RasEnumConnectionsA
RasEnumConnectionsW
RasEnumDevicesA
RasEnumDevicesW
RasEnumEntriesA
RasEnumEntriesW
RasFreeEapUserIdentityA
RasFreeEapUserIdentityW
RasGetAutodialAddressA
RasGetAutodialAddressW
RasGetAutodialEnableA
RasGetAutodialEnableW
RasGetAutodialParamA
RasGetAutodialParamW
RasGetConnectStatusA
RasGetConnectStatusW
RasGetConnectionStatistics
RasGetCountryInfoA
RasGetCountryInfoW
RasGetCredentialsA
RasGetCredentialsW
RasGetCustomAuthDataA
RasGetCustomAuthDataW
RasGetEapUserDataA
RasGetEapUserDataW
RasGetEapUserIdentityA
RasGetEapUserIdentityW
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasGetEntryPropertiesW
RasGetErrorStringA
RasGetErrorStringW
RasGetHport
RasGetLinkStatistics
RasGetNapStatus
RasGetProjectionInfoA
RasGetProjectionInfoW
RasGetSubEntryHandleA
RasGetSubEntryHandleW
RasGetSubEntryPropertiesA
RasGetSubEntryPropertiesW
RasHangUpA
RasHangUpW
RasInvokeEapUI
RasQueryRedialOnLinkFailure
RasQuerySharedAutoDial
RasQuerySharedConnection
RasRenameEntryA
RasRenameEntryW
RasScriptTerm
RasSetAutodialAddressA
RasSetAutodialAddressW
RasSetAutodialEnableA
RasSetAutodialEnableW
RasSetAutodialParamA
RasSetAutodialParamW
RasSetCredentialsA
RasSetCredentialsW
RasSetCustomAuthDataA
RasSetCustomAuthDataW
RasSetEapUserDataA
RasSetEapUserDataW
RasSetEntryDialParamsA
RasSetEntryDialParamsW
RasSetEntryPropertiesA
RasSetEntryPropertiesW
RasSetOldPassword
RasSetSharedAutoDial
RasSetSubEntryPropertiesA
RasSetSubEntryPropertiesW
RasValidateEntryNameA
RasValidateEntryNameW
RasEnumEntriesA
RasEnumEntriesA
opengl32
GlmfBeginGlsBlock
GlmfBeginGlsBlock
odbctrac
TraceSQLAllocEnv
dsauth
DhcpDsAddServer
credui
CredUIInitControls
cryptui
CryptUIDlgSelectCA
CryptUIDlgSelectCA
cfgmgr32
CM_Delete_Range
msvcrt
fopen
fread
pdh
PdhEnumObjectsA
dnsapi
DnsQueryExA
DnsNameCopy
DnsCopyStringEx
DnsApiFree
DnsApiAlloc
Sections
text Size: 1024B - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DAT Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE