Static task
static1
Behavioral task
behavioral1
Sample
b650fd13814982b311141439e235f2baaf018c52f9ecb98ccee841fa03c23b8d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b650fd13814982b311141439e235f2baaf018c52f9ecb98ccee841fa03c23b8d.exe
Resource
win10v2004-20220901-en
General
-
Target
b650fd13814982b311141439e235f2baaf018c52f9ecb98ccee841fa03c23b8d
-
Size
818KB
-
MD5
af723786bb2185446c66c54b85cf4f46
-
SHA1
c9a178e163cf27898390adff0ad4a8e3a28d67f9
-
SHA256
b650fd13814982b311141439e235f2baaf018c52f9ecb98ccee841fa03c23b8d
-
SHA512
7a86df8a7e256cc24da5bf8f143e1cd3c9ad0e410d02cb0d474876dcd9b3bca8f6f7e40f1ddcd80c34878955cacfde58a909a24ba02f93f0ac21fbb3d6754737
-
SSDEEP
24576:A3Bfo7nRZzD5CIk1/IGcCjE40mlfrc7VhHJe:0ozzF94/lcG0mlzAVJJ
Malware Config
Signatures
Files
-
b650fd13814982b311141439e235f2baaf018c52f9ecb98ccee841fa03c23b8d.exe windows x86
61cf186f4b85a113c8354a9bed8d5ee1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
FindFirstVolumeA
Heap32First
lstrcpynA
lstrcpynA
GetVolumeInformationA
GetModuleHandleA
GetCurrentDirectoryA
lstrcatA
GetSystemTime
SetThreadPriority
lstrcpynA
lstrcpynA
VirtualFree
WriteFile
VirtualProtectEx
GetFileType
GetPrivateProfileIntA
GetDiskFreeSpaceW
lstrcpynA
OpenMutexW
ReadConsoleA
lstrcpynA
lstrcmpW
GetCurrentThreadId
lstrcpynA
GetDriveTypeA
lstrcpynA
lstrcpynA
cmdial32
AutoDialFunc
InetDialHandler
RasCustomDialDlg
RasCustomDial
Sections
.text Size: 18KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ