Static task
static1
Behavioral task
behavioral1
Sample
52630ec084ca0c916c89b44816d6bd733fe498bd04a30484c4bd34ec7f1a588a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52630ec084ca0c916c89b44816d6bd733fe498bd04a30484c4bd34ec7f1a588a.exe
Resource
win10v2004-20220812-en
General
-
Target
52630ec084ca0c916c89b44816d6bd733fe498bd04a30484c4bd34ec7f1a588a
-
Size
819KB
-
MD5
b4d5629d28f1f9ace74397c2d9ccafb5
-
SHA1
2ce0b62ceb52895b401374f42b81d79f83be873f
-
SHA256
52630ec084ca0c916c89b44816d6bd733fe498bd04a30484c4bd34ec7f1a588a
-
SHA512
3a4c5602286d834c23abe06e3a36c75c27c97c8a5c40f97fd07acc21f6efe9f1585aaaa84190c3cd212c3c5dd118e5422657bbdcb46e17b7ab18b9379b66f569
-
SSDEEP
12288:+yKsh9KBX/RBrIo4DIauscGKY0nY2uGAJIP7YDSglrrWwZ+y/D7+5yDtTvR5:VXcvjQAscGfGAecuIr1+s65yDtLR5
Malware Config
Signatures
Files
-
52630ec084ca0c916c89b44816d6bd733fe498bd04a30484c4bd34ec7f1a588a.exe windows x86
6fc6ddb17070ac412d2fc9bb9396790f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryA
GetDriveTypeA
FormatMessageW
GetFileType
GetSystemTime
ReadConsoleA
SetThreadPriority
VirtualProtectEx
lstrcpynA
GetDiskFreeSpaceW
GetPrivateProfileIntA
lstrcpynA
GetCurrentThreadId
lstrcpynA
GetModuleHandleA
lstrcpynA
Heap32First
lstrcpynA
OpenMutexW
GetVolumeInformationA
lstrcatA
VirtualFree
lstrcpynA
ReadFile
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcmpA
cmdial32
AutoDialFunc
RasCustomDialDlg
InetDialHandler
RasCustomDial
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ