Static task
static1
Behavioral task
behavioral1
Sample
9a346d7a85cb7bb2f69e99c0f41cc3744034a35e04816fc240b76af0650212ed.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9a346d7a85cb7bb2f69e99c0f41cc3744034a35e04816fc240b76af0650212ed.exe
Resource
win10v2004-20221111-en
General
-
Target
9a346d7a85cb7bb2f69e99c0f41cc3744034a35e04816fc240b76af0650212ed
-
Size
21KB
-
MD5
084dfdd4d0f670b92f1bd2c0c346a56e
-
SHA1
aee6ae3f0adb5b83e74597d24cee002e777d22e0
-
SHA256
9a346d7a85cb7bb2f69e99c0f41cc3744034a35e04816fc240b76af0650212ed
-
SHA512
540983d13ac5106d9d0f188fab172a71febb5ef2335d7148f52c74fa495eda297cdae2f3f804aa378f169a0be7de9cff9ad9f755d0d76cc4123a64cc19ba1c92
-
SSDEEP
192:hwdjg0XUI5riA3tDSkHd+bbqdhJ23t7iC38e2P1oynItmto:hSjpXUI5riA3HEq116tOo
Malware Config
Signatures
Files
-
9a346d7a85cb7bb2f69e99c0f41cc3744034a35e04816fc240b76af0650212ed.exe windows x86
ea1bf562ab080956b2e2e0f6938b68c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasEnumEntriesA
RasGetEntryPropertiesA
RasSetEntryPropertiesA
RasGetEntryDialParamsA
RasSetEntryDialParamsA
RasDialA
RasGetErrorStringA
RasEnumConnectionsA
RasHangUpA
mfc42
ord1997
ord6392
ord5448
ord532
ord922
ord858
ord924
ord798
ord860
ord3663
ord825
ord535
ord5856
ord4202
ord4129
ord5465
ord5778
ord3318
ord5194
ord533
ord5440
ord6383
ord823
ord5450
ord6394
ord537
ord800
ord540
ord926
msvcrt
_mbscmp
_execl
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
_gcvt
__CxxFrameHandler
kernel32
GetStartupInfoA
GetModuleHandleA
GetLocaleInfoA
lstrcpyA
Sleep
GetTickCount
GetWindowsDirectoryA
GetModuleFileNameA
GetEnvironmentVariableA
CloseHandle
WriteFile
CreateFileA
CreateProcessA
user32
SystemParametersInfoA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE