Static task
static1
Behavioral task
behavioral1
Sample
b3720a05323a2fe84af043b57642d7c155205bd9c189c8567a0b4ef25eee55c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3720a05323a2fe84af043b57642d7c155205bd9c189c8567a0b4ef25eee55c2.exe
Resource
win10v2004-20220812-en
General
-
Target
b3720a05323a2fe84af043b57642d7c155205bd9c189c8567a0b4ef25eee55c2
-
Size
818KB
-
MD5
49e7d7708c0e19667cb53d1e41ff20b9
-
SHA1
4a5aa9467eb2ad58d50970e8002e90611c4d5d03
-
SHA256
b3720a05323a2fe84af043b57642d7c155205bd9c189c8567a0b4ef25eee55c2
-
SHA512
9c1498cff9e7af2e78924b6ed43f9ed58479587d8d000a893b9def6be4fdafd6a2b062a395c9a28ebc88e8476ecb181f45817a6f58fc47240c54e156bc1ac5fe
-
SSDEEP
24576:poVKoP25PQQjZdzEmca9NKyTbQEP2CLm0KAQS9:ET25owX3ca9NnTMvCm0KS9
Malware Config
Signatures
Files
-
b3720a05323a2fe84af043b57642d7c155205bd9c189c8567a0b4ef25eee55c2.exe windows x86
27f2d47f8ff2a5b262db9dd7cf0d9830
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
FindFirstVolumeA
SetThreadPriority
Heap32First
lstrcpynA
lstrcmpW
GetDriveTypeA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
ReadConsoleA
GetSystemTime
lstrcpynA
lstrcatA
GetPrivateProfileIntA
OpenMutexW
lstrcpynA
GetModuleHandleA
WriteFile
VirtualProtectEx
VirtualFree
GetVolumeInformationA
GetFileType
GetCurrentThreadId
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
lstrcpynA
cmdial32
RasCustomDialDlg
AutoDialFunc
RasCustomDial
InetDialHandler
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ