Static task
static1
Behavioral task
behavioral1
Sample
b702e6e2363620d5ce1decb6f9b039aa8d5d9875a65192a83e1c12d87813dd45.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b702e6e2363620d5ce1decb6f9b039aa8d5d9875a65192a83e1c12d87813dd45.exe
Resource
win10v2004-20220812-en
General
-
Target
b702e6e2363620d5ce1decb6f9b039aa8d5d9875a65192a83e1c12d87813dd45
-
Size
56KB
-
MD5
62c69046f7707a78e8d964589f45c2c1
-
SHA1
7735a86b6811caffbaa9505669e3f176c1ca42c0
-
SHA256
b702e6e2363620d5ce1decb6f9b039aa8d5d9875a65192a83e1c12d87813dd45
-
SHA512
3859d80ac46ccfcc4fbbe0f513a7ea123093babb9500e5f5bc854db9a740af163e687202f5b436d9dc249e231a36349c67923e97eb0b88c1ca5c7f11335a46a4
-
SSDEEP
768:HyNml+vvTHGeee14PAW7sz76VYwQbjsVKbB6mN98OCFPoWDH:Hycl+vviNPQ76ew6YyBLt4oWD
Malware Config
Signatures
Files
-
b702e6e2363620d5ce1decb6f9b039aa8d5d9875a65192a83e1c12d87813dd45.exe windows x86
a5ba8907649b31bf975eee39747327a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
RasHangUpA
RasEnumConnectionsA
RasDialA
RasDeleteEntryA
RasGetErrorStringA
kernel32
SetStdHandle
Sleep
lstrcpyA
CloseHandle
CreateFileA
GetProfileStringA
WriteFile
lstrlenA
lstrcatA
SetFilePointer
WinExec
DeleteFileA
GetWindowsDirectoryA
CreateProcessA
TerminateProcess
GetExitCodeProcess
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
HeapAlloc
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
FreeEnvironmentStringsW
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeA
GetStringTypeW
FlushFileBuffers
VirtualAlloc
HeapReAlloc
HeapCreate
WideCharToMultiByte
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
ExitProcess
GetLocalTime
GetLastError
SetEnvironmentVariableA
GetVersion
CreateDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
user32
wvsprintfA
wsprintfA
GetDlgItem
EnableWindow
IsDialogMessageA
DestroyWindow
PostQuitMessage
CreateWindowExA
RegisterWindowMessageA
CreateDialogParamA
FindWindowA
SendMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
SetWindowTextA
IsWindowEnabled
RegisterClassA
LoadCursorA
advapi32
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
nsreg
?NR_StartupRegistry@@YGXXZ
?NR_RegOpen@@YGHPADPAPAX@Z
?NR_RegGetKey@@YGHPAXHPADPAH@Z
?NR_RegSetEntryString@@YGHPAXHPAD1@Z
?NR_RegAddKey@@YGHPAXHPADPAH@Z
?NR_RegClose@@YGHPAX@Z
?NR_ShutdownRegistry@@YGXXZ
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ