Static task
static1
Behavioral task
behavioral1
Sample
b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73.exe
Resource
win10v2004-20221111-en
General
-
Target
b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73
-
Size
818KB
-
MD5
dc2bd70e8738fab26fc909c4d120b619
-
SHA1
e9772a96c51cf60950a6860222f09a42ce23a0b9
-
SHA256
b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73
-
SHA512
3da57aa8c01bfe6c4a11125274b5368780d3017613788a272142af6d554a3fc1b82170ddd15cd64118e66dcc83ca114da0d068fb891df6eeed50974718fc66ed
-
SSDEEP
12288:bSDlYTw468tW6k/YjgUSDAOwggW5KfeAWiQ9b6fhKzyw0sj226lla0fnMoE:n68U6awgFbAVVfhFsj/yw0/
Malware Config
Signatures
Files
-
b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73.exe windows x86
3035b2c876a839d05c9945a72e88a0ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetDriveTypeA
GetModuleHandleA
lstrcpynA
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
GetCurrentThreadId
GetFileType
lstrcpynA
ReadConsoleA
FindFirstVolumeA
OpenMutexW
lstrcpynA
VirtualProtectEx
lstrcmpW
WriteFile
GetCurrentDirectoryA
SetThreadPriority
VirtualFree
GetSystemTime
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
GetVolumeInformationA
Heap32First
cmdial32
RasCustomDialDlg
InetDialHandler
RasCustomDial
AutoDialFunc
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ