Static task
static1
Behavioral task
behavioral1
Sample
672dbccd98753f6f9116b338923ea252aa8b80e6467bd0df00b7751f5d9efada.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
672dbccd98753f6f9116b338923ea252aa8b80e6467bd0df00b7751f5d9efada.exe
Resource
win10v2004-20220812-en
General
-
Target
672dbccd98753f6f9116b338923ea252aa8b80e6467bd0df00b7751f5d9efada
-
Size
1.9MB
-
MD5
11eafe59ae709a7718534cadc6c7c6ff
-
SHA1
03ae9888da89fc619f72e8f456ed4a60166a0c33
-
SHA256
672dbccd98753f6f9116b338923ea252aa8b80e6467bd0df00b7751f5d9efada
-
SHA512
5f348ff6e89b3dc23186beec535b40f84e13ccc7009b8db9e1f087e4f141f99a868862615de24f19538f1445bda81822fc3f027f9ff1c5b8f416501a252677ea
-
SSDEEP
49152:XRE5QVqfag1jb3YOh/XCFdU5Uzc/275pbC:XRE5z1nzgzc//
Malware Config
Signatures
Files
-
672dbccd98753f6f9116b338923ea252aa8b80e6467bd0df00b7751f5d9efada.exe windows x86
cea6bc6836d713f4e39250d1090417bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamClose
ws2_32
recvfrom
kernel32
SetSystemPowerState
user32
ScrollWindowEx
gdi32
PatBlt
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
OpenProcessToken
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetConnectA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 548KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ