Static task
static1
Behavioral task
behavioral1
Sample
8e3165229c0e304d0ddfa5be216e819a920e4c2d1a8b2d1b80dba3e5fe74ebb4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8e3165229c0e304d0ddfa5be216e819a920e4c2d1a8b2d1b80dba3e5fe74ebb4.exe
Resource
win10v2004-20220901-en
General
-
Target
8e3165229c0e304d0ddfa5be216e819a920e4c2d1a8b2d1b80dba3e5fe74ebb4
-
Size
818KB
-
MD5
91a4e23603c0d6884de46552ef6f740d
-
SHA1
13ae05c3d160cecdf5d61da837a3e26cfc4db74f
-
SHA256
8e3165229c0e304d0ddfa5be216e819a920e4c2d1a8b2d1b80dba3e5fe74ebb4
-
SHA512
1bfc3fc5e2298c874774da901ba4647f2bb8a6cce00f648f8b06be4f0c347a8860c460cc91f20264e7d950a3a9e8062e8bf111bdc170028ba63d50f59da160a9
-
SSDEEP
24576:kYRFo5yNIr0XykOktX44aeYBM9D8KKKCk:lRFo5y2YX1O044aeYg8KKl
Malware Config
Signatures
Files
-
8e3165229c0e304d0ddfa5be216e819a920e4c2d1a8b2d1b80dba3e5fe74ebb4.exe windows x86
f569796c712a749c2c80fc7467a24404
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetPrivateProfileIntA
FindFirstVolumeA
lstrcpynA
GetCurrentThreadId
lstrcpynA
VirtualProtectEx
Heap32First
SetThreadPriority
VirtualFree
lstrcpynA
ReadConsoleA
GetFileType
GetVolumeInformationA
GetCurrentDirectoryA
GetDriveTypeA
lstrcpynA
GetModuleHandleA
lstrcpynA
lstrcpynA
WriteFile
lstrcpynA
lstrcmpW
OpenMutexW
lstrcpynA
lstrcatA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
cmdial32
RasCustomDial
RasCustomDialDlg
InetDialHandler
AutoDialFunc
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ