Static task
static1
Behavioral task
behavioral1
Sample
3664aa96c24ce936ceb27a5fa5b9ae0bcc271d3da2de8ba716adc742ac13ce07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3664aa96c24ce936ceb27a5fa5b9ae0bcc271d3da2de8ba716adc742ac13ce07.exe
Resource
win10v2004-20220901-en
General
-
Target
3664aa96c24ce936ceb27a5fa5b9ae0bcc271d3da2de8ba716adc742ac13ce07
-
Size
818KB
-
MD5
5c7a97469fe224deeb3622c6cec4f32c
-
SHA1
ad717fd72ab4f1ef4fd117f0d01291e3989c0fcf
-
SHA256
3664aa96c24ce936ceb27a5fa5b9ae0bcc271d3da2de8ba716adc742ac13ce07
-
SHA512
8119af4b5435e3e282726d6e164b1c8254260d5995921af568630f5848657555073fc2ce85999f0eef4f741bcae2c01581dffc9d9deb59ace6546ce9de2ccaec
-
SSDEEP
24576:ybBsZo0tPOSpzPTQqnYKNAzvFStR463TkQ:ybqZZOSpzPvZa8H4IgQ
Malware Config
Signatures
Files
-
3664aa96c24ce936ceb27a5fa5b9ae0bcc271d3da2de8ba716adc742ac13ce07.exe windows x86
6a8ed6c86623c1a4a0fc3d2c42471cc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetCurrentThreadId
lstrcpynA
lstrcpynA
lstrcpynA
GetDriveTypeA
OpenMutexW
SetThreadPriority
GetDiskFreeSpaceW
GetVolumeInformationA
lstrcpynA
GetFileType
GetModuleHandleA
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
lstrcatA
ReadConsoleA
FindFirstVolumeA
VirtualFree
lstrcpynA
GetSystemTime
lstrcpynA
lstrcmpW
Heap32First
lstrcpynA
lstrcpynA
VirtualProtectEx
cmdial32
RasCustomDial
InetDialHandler
AutoDialFunc
RasCustomDialDlg
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ