Static task
static1
Behavioral task
behavioral1
Sample
53b1e671b43772d691f2f50590ab41b7d4f92f3437918e80b3112f2ed8a545d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53b1e671b43772d691f2f50590ab41b7d4f92f3437918e80b3112f2ed8a545d1.exe
Resource
win10v2004-20220812-en
General
-
Target
53b1e671b43772d691f2f50590ab41b7d4f92f3437918e80b3112f2ed8a545d1
-
Size
818KB
-
MD5
4ead391021a9b2b40a3d1c9010e0b00b
-
SHA1
1e7db94937912983eaa07c6ed7d73ecc562f3720
-
SHA256
53b1e671b43772d691f2f50590ab41b7d4f92f3437918e80b3112f2ed8a545d1
-
SHA512
cc2389c62a5284ee40f85d057639269f280229d50266e0d9b3042845abb6aabbe33a51e5f3835dc66fb96ee319c1104a7b14d8b2af0d82b625d4d289c7e9f449
-
SSDEEP
24576:TmY3vf26X2BkmDknb5AWvpmwjq4utbhuot1JzDMUqDB0l:Thvu6Cwnb+AE4SNuo/VgUqDB
Malware Config
Signatures
Files
-
53b1e671b43772d691f2f50590ab41b7d4f92f3437918e80b3112f2ed8a545d1.exe windows x86
dd8076eaf85bfe21c81c4ddb28dee130
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
lstrcatA
Heap32First
GetPrivateProfileIntA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
ReadConsoleA
lstrcpynA
lstrcpynA
SetThreadPriority
VirtualProtectEx
GetVolumeInformationA
lstrcpynA
lstrcpynA
lstrcpynA
GetModuleHandleA
GetFileType
GetDriveTypeA
lstrcpynA
OpenMutexW
GetSystemTime
GetCurrentThreadId
lstrcpynA
lstrcpynA
FindFirstVolumeA
GetDiskFreeSpaceW
VirtualFree
lstrcmpW
cmdial32
RasCustomDial
InetDialHandler
AutoDialFunc
RasCustomDialDlg
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ