Static task
static1
Behavioral task
behavioral1
Sample
bd43c4d11401a46c9e46226eb6115378ee7ba8a9ea99e07c14da5f7f56af2527.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd43c4d11401a46c9e46226eb6115378ee7ba8a9ea99e07c14da5f7f56af2527.exe
Resource
win10v2004-20220901-en
General
-
Target
bd43c4d11401a46c9e46226eb6115378ee7ba8a9ea99e07c14da5f7f56af2527
-
Size
28KB
-
MD5
0ef0c977310d515ceb7c42e3ed34e1f0
-
SHA1
1c5f2d4201ab24f71a87c49bb08d7f5a3c01cee4
-
SHA256
bd43c4d11401a46c9e46226eb6115378ee7ba8a9ea99e07c14da5f7f56af2527
-
SHA512
73676396448e584834f26bd455c3076e16b23df4b0fc18d741972b712f2182b96cfb5b98bab9a02c312102f3f9f96e82e790e3dcfa4788b37ff97f8dfa1e363a
-
SSDEEP
768:i26xoURkmh/zzzzzzzzzzzzzzzzzzzzzzzzzzzz21DQm1fm0:EVzzzzzzzzzzzzzzzzzzzzzzzzzzzz2t
Malware Config
Signatures
Files
-
bd43c4d11401a46c9e46226eb6115378ee7ba8a9ea99e07c14da5f7f56af2527.exe windows x86
0677263bcf079777becddaaf0c017104
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CompareStringA
AttachConsole
CompareStringW
ContinueDebugEvent
ConvertDefaultLocale
CreateJobObjectW
ReadConsoleOutputW
IsDebuggerPresent
Beep
_lopen
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
MulDiv
BackupWrite
GetTickCount
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
rasapi32
RasEnumEntriesA
DDMGetPhonebookInfo
DwCloneEntry
RasAutoDialSharedConnection
RasAutodialAddressToNetwork
RasAutodialEntryToNetwork
RasClearConnectionStatistics
RasClearLinkStatistics
RasConnectionNotificationA
RasConnectionNotificationW
RasCreatePhonebookEntryA
RasCreatePhonebookEntryW
RasDeleteEntryA
RasDeleteEntryW
RasDeleteSubEntryA
RasDeleteSubEntryW
RasDialA
RasDialW
RasEditPhonebookEntryA
RasEditPhonebookEntryW
RasEnumAutodialAddressesA
RasEnumAutodialAddressesW
RasEnumConnectionsA
RasEnumConnectionsW
RasEnumDevicesA
RasEnumDevicesW
RasEnumEntriesA
RasEnumEntriesW
RasFreeEapUserIdentityA
RasFreeEapUserIdentityW
RasGetAutodialAddressA
RasGetAutodialAddressW
RasGetAutodialEnableA
RasGetAutodialEnableW
RasGetAutodialParamA
RasGetAutodialParamW
RasGetConnectStatusA
RasGetConnectStatusW
RasGetConnectionStatistics
RasGetCountryInfoA
RasGetCountryInfoW
RasGetCredentialsA
RasGetCredentialsW
RasGetCustomAuthDataA
RasGetCustomAuthDataW
RasGetEapUserDataA
RasGetEapUserDataW
RasGetEapUserIdentityA
RasGetEapUserIdentityW
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasGetEntryPropertiesW
RasGetErrorStringA
RasGetErrorStringW
RasGetHport
RasGetLinkStatistics
RasGetNapStatus
RasGetProjectionInfoA
RasGetProjectionInfoW
RasGetSubEntryHandleA
RasGetSubEntryHandleW
RasGetSubEntryPropertiesA
RasGetSubEntryPropertiesW
RasHangUpA
RasHangUpW
RasInvokeEapUI
RasQueryRedialOnLinkFailure
RasQuerySharedAutoDial
RasQuerySharedConnection
RasRenameEntryA
RasRenameEntryW
RasScriptTerm
RasSetAutodialAddressA
RasSetAutodialAddressW
RasSetAutodialEnableA
RasSetAutodialEnableW
RasSetAutodialParamA
RasSetAutodialParamW
RasSetCredentialsA
RasSetCredentialsW
RasSetCustomAuthDataA
RasSetCustomAuthDataW
RasSetEapUserDataA
RasSetEapUserDataW
RasSetEntryDialParamsA
RasSetEntryDialParamsW
RasSetEntryPropertiesA
RasSetEntryPropertiesW
RasSetOldPassword
RasSetSharedAutoDial
RasSetSubEntryPropertiesA
RasSetSubEntryPropertiesW
RasValidateEntryNameA
RasValidateEntryNameW
RasEnumEntriesA
RasEnumEntriesA
opengl32
GlmfBeginGlsBlock
GlmfBeginGlsBlock
odbctrac
TraceSQLAllocEnv
dsauth
DhcpDsAddServer
credui
CredUIInitControls
cryptui
CryptUIDlgSelectCA
CryptUIDlgSelectCA
cfgmgr32
CM_Delete_Range
msvcrt
fopen
fread
pdh
PdhEnumObjectsA
dnsapi
DnsQueryExA
DnsNameCopy
DnsCopyStringEx
DnsApiFree
DnsApiAlloc
Sections
text Size: 1024B - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DAT Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE