Static task
static1
Behavioral task
behavioral1
Sample
e473c6e394430ba25e3e155d4d258d15e84f71afd41d7e4e26f040114eb05e57.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e473c6e394430ba25e3e155d4d258d15e84f71afd41d7e4e26f040114eb05e57.exe
Resource
win10v2004-20221111-en
General
-
Target
e473c6e394430ba25e3e155d4d258d15e84f71afd41d7e4e26f040114eb05e57
-
Size
819KB
-
MD5
c68c622a14eed41ab1914d396767a444
-
SHA1
0a72ebadffb173ec696c6a920bfe122ad6aa6cb5
-
SHA256
e473c6e394430ba25e3e155d4d258d15e84f71afd41d7e4e26f040114eb05e57
-
SHA512
a4d9218668ed2a80c7cfac8fb8f353eaaee1821b06b8edba481b531cdc18dc625e67b84518507a76158cc52bb18d0c392cbd831d855dffc79f71505508ff85b8
-
SSDEEP
12288:wJMbTmZcgQ6t2tWejFCrDiAV7/OWL6XZfDPzshHquZ5k81ysyp0WpdvK:WMeGgQ6tykiAV56X9PAJqIeNpY
Malware Config
Signatures
Files
-
e473c6e394430ba25e3e155d4d258d15e84f71afd41d7e4e26f040114eb05e57.exe windows x86
5b13700146748fb903b18e8a9920f8f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
GetModuleHandleA
lstrcpynA
FormatMessageW
lstrcpynA
GetFileType
GetCurrentDirectoryA
ReadFile
GetSystemTime
GetDiskFreeSpaceW
lstrcpynA
OpenMutexW
lstrcpynA
VirtualFree
lstrcpynA
lstrcpynA
Heap32First
lstrcpynA
GetVolumeInformationA
GetPrivateProfileIntA
GetDriveTypeA
SetThreadPriority
VirtualProtectEx
ReadConsoleA
lstrcatA
GetCurrentThreadId
lstrcmpA
lstrcpynA
lstrcpynA
cmdial32
RasCustomDialDlg
RasCustomDial
AutoDialFunc
InetDialHandler
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ