Static task
static1
Behavioral task
behavioral1
Sample
c2bd08150cc5f0f2df3fbe2b734532e14fa799d59b59859bc27bf7abe8a3f7e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2bd08150cc5f0f2df3fbe2b734532e14fa799d59b59859bc27bf7abe8a3f7e5.exe
Resource
win10v2004-20220812-en
General
-
Target
c2bd08150cc5f0f2df3fbe2b734532e14fa799d59b59859bc27bf7abe8a3f7e5
-
Size
818KB
-
MD5
89b5427ad3e8ff2aff8e7ce7a7ea92ed
-
SHA1
516284cfac7fdfcab2b6b3eb983a21ff79a7379c
-
SHA256
c2bd08150cc5f0f2df3fbe2b734532e14fa799d59b59859bc27bf7abe8a3f7e5
-
SHA512
2e26ae205ca1cf04e8947ce94b3248af276f19a1b5232e667c7eecf84c941bbc6f3ff4de2700f41492f4004cd26ddcdf5d1d867649fac6f996e2614bb79ac57f
-
SSDEEP
24576:/CK4jsVcHUybnWkF1CcfaymDu+62BdROAE+FR2:/CK4Q2HlWkLC8+62BdcAVm
Malware Config
Signatures
Files
-
c2bd08150cc5f0f2df3fbe2b734532e14fa799d59b59859bc27bf7abe8a3f7e5.exe windows x86
edb8c9b29af7b759d35e36aa8d5a0b67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
lstrcpynA
lstrcpynA
lstrcmpW
GetVolumeInformationA
GetCurrentThreadId
Heap32First
GetCurrentDirectoryA
GetFileType
lstrcpynA
GetDriveTypeA
FindFirstVolumeA
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
SetThreadPriority
ReadConsoleA
OpenMutexW
GetSystemTime
GetModuleHandleA
lstrcpynA
VirtualFree
lstrcpynA
lstrcpynA
lstrcatA
lstrcpynA
VirtualProtectEx
GetDiskFreeSpaceW
WriteFile
cmdial32
InetDialHandler
AutoDialFunc
RasCustomDialDlg
RasCustomDial
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ