Static task
static1
Behavioral task
behavioral1
Sample
d11cb70fce5211d2cbe5de51ec34728994656dde4350608f38868b1b98b439df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d11cb70fce5211d2cbe5de51ec34728994656dde4350608f38868b1b98b439df.exe
Resource
win10v2004-20220812-en
General
-
Target
d11cb70fce5211d2cbe5de51ec34728994656dde4350608f38868b1b98b439df
-
Size
818KB
-
MD5
32901faeffced7fa18ec74fe7143680d
-
SHA1
e7d2caa0fbc50964321efb9426c9827c7a3d1522
-
SHA256
d11cb70fce5211d2cbe5de51ec34728994656dde4350608f38868b1b98b439df
-
SHA512
f9c6d852088061674b0b612acee84f43c764fdba399d9b635b2b43709971628f062efa683e4865eb09959937be1b1c03558b0d4f1b0dfbe780193acd18406d38
-
SSDEEP
12288:c8w9KehpN1MZUxHNpCaSaV+lp82R0se5a3+tlbiOg2aq5Ny5fY8MOGoV47szW1p5:oNy2JkUgplR4rbdXGAxOThOp
Malware Config
Signatures
Files
-
d11cb70fce5211d2cbe5de51ec34728994656dde4350608f38868b1b98b439df.exe windows x86
d55260b65a4ef833c289af29f1347124
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
lstrcpynA
lstrcpynA
OpenMutexW
GetDiskFreeSpaceW
ReadConsoleA
WriteFile
SetThreadPriority
lstrcpynA
GetCurrentThreadId
GetModuleHandleA
GetFileType
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
lstrcpynA
VirtualFree
lstrcpynA
lstrcpynA
GetSystemTime
lstrcpynA
FindFirstVolumeA
GetDriveTypeA
VirtualProtectEx
lstrcatA
GetVolumeInformationA
Heap32First
lstrcpynA
GetCurrentDirectoryA
cmdial32
AutoDialFunc
RasCustomDialDlg
RasCustomDial
InetDialHandler
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ