Static task
static1
Behavioral task
behavioral1
Sample
a80fbdb39f7b82cddac359e563eb6d1f8384d0a2a2a922002c126b6d991dbb5a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a80fbdb39f7b82cddac359e563eb6d1f8384d0a2a2a922002c126b6d991dbb5a.exe
Resource
win10v2004-20220901-en
General
-
Target
a80fbdb39f7b82cddac359e563eb6d1f8384d0a2a2a922002c126b6d991dbb5a
-
Size
22KB
-
MD5
0c1f44241767fac0352a08539f34285f
-
SHA1
58b797dde05c38d84f32039f878b458dae57b9dd
-
SHA256
a80fbdb39f7b82cddac359e563eb6d1f8384d0a2a2a922002c126b6d991dbb5a
-
SHA512
a5542a8683da294e71904a44efe97d401ee66900fc0c116fc165b03fa975c9913b67d6b1c17f8195473799174c5b60335ebff1283c541d368782acfd656c9a00
-
SSDEEP
384:ecnE0N9TugdeVfaO+BWVHcufg/1uR07MGLfBGmFRRZYcfH6kLmn:ecnHN9T9eBgWVHcufs8+7zVGa1Y8vLmn
Malware Config
Signatures
Files
-
a80fbdb39f7b82cddac359e563eb6d1f8384d0a2a2a922002c126b6d991dbb5a.exe windows x86
f13fa1a1394daf4bb47d46dbdf83dce8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasEnumConnectionsA
kernel32
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
CloseHandle
SetEndOfFile
WriteFile
SetFilePointer
GetTempPathA
GetProcessHeap
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
GetCurrentProcess
TerminateProcess
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
CreateProcessA
GetSystemDefaultLCID
RtlUnwind
user32
CharNextA
advapi32
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
ole32
StringFromCLSID
CoCreateGuid
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ