Static task
static1
Behavioral task
behavioral1
Sample
d98273f0e7efc7905a52297aaae97b9f687bd344cf3dfde3c2ac9d78185f6340.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d98273f0e7efc7905a52297aaae97b9f687bd344cf3dfde3c2ac9d78185f6340.exe
Resource
win10v2004-20220812-en
General
-
Target
d98273f0e7efc7905a52297aaae97b9f687bd344cf3dfde3c2ac9d78185f6340
-
Size
22KB
-
MD5
38ddb51e61cf2c505983990acf238d40
-
SHA1
1a141c540dc6ff6eb1976056c87bee30f8542505
-
SHA256
d98273f0e7efc7905a52297aaae97b9f687bd344cf3dfde3c2ac9d78185f6340
-
SHA512
10b76a8bfb55f17469dca1fbe9cc4b3d92a5af84c7137def35471cca49c72188834f2206a9ad9e91cccfa0f2133a7f731e5e726961a454c7ee04a290a0611630
-
SSDEEP
384:ecnE0N9TugdeVfaO+BWVHcufg/1uR07MGLfBGmFRRZYcfH6kLm8:ecnHN9T9eBgWVHcufs8+7zVGa1Y8vLm8
Malware Config
Signatures
Files
-
d98273f0e7efc7905a52297aaae97b9f687bd344cf3dfde3c2ac9d78185f6340.exe windows x86
f13fa1a1394daf4bb47d46dbdf83dce8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasEnumConnectionsA
kernel32
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
CloseHandle
SetEndOfFile
WriteFile
SetFilePointer
GetTempPathA
GetProcessHeap
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
GetCurrentProcess
TerminateProcess
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
CreateProcessA
GetSystemDefaultLCID
RtlUnwind
user32
CharNextA
advapi32
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
ole32
StringFromCLSID
CoCreateGuid
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ