Static task
static1
Behavioral task
behavioral1
Sample
25d836169a5bd5ed9e15ff558372964d14d705f9ad944d17c5bd10703e00be9d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
25d836169a5bd5ed9e15ff558372964d14d705f9ad944d17c5bd10703e00be9d.exe
Resource
win10v2004-20220812-en
General
-
Target
25d836169a5bd5ed9e15ff558372964d14d705f9ad944d17c5bd10703e00be9d
-
Size
818KB
-
MD5
b08078a8865cf06d7efc9cd0539aeff9
-
SHA1
6ecae9676d4764e557634a85c4d5a287306d6546
-
SHA256
25d836169a5bd5ed9e15ff558372964d14d705f9ad944d17c5bd10703e00be9d
-
SHA512
82259bfeb4c61a5d56ea144bfe9c436714c5dd5541935893bc34f1c832b44e507fdd85d6ca478a17e454875d6aec4465a807b4a03f45308454e7bdda9026b8c5
-
SSDEEP
12288:3JMbTmZcgQ6t2tWejFCrDiAV7/OWL6XZfDPzshHquZ5k81ysyp0WpdvK:ZMeGgQ6tykiAV56X9PAJqIeNpY
Malware Config
Signatures
Files
-
25d836169a5bd5ed9e15ff558372964d14d705f9ad944d17c5bd10703e00be9d.exe windows x86
d49be2a8f151c181aa6df5f606701831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetCurrentThreadId
lstrcpynA
GetPrivateProfileIntA
GetSystemTime
GetVolumeInformationA
lstrcatA
lstrcpynA
VirtualProtectEx
lstrcpynA
Heap32First
lstrcpynA
lstrcpynA
FindFirstVolumeA
lstrcpynA
OpenMutexW
GetCurrentDirectoryA
GetDriveTypeA
SetThreadPriority
lstrcpynA
lstrcmpW
lstrcpynA
GetFileType
ReadConsoleA
WriteFile
GetModuleHandleA
GetDiskFreeSpaceW
VirtualFree
lstrcpynA
cmdial32
RasCustomDial
InetDialHandler
RasCustomDialDlg
AutoDialFunc
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ