Static task
static1
Behavioral task
behavioral1
Sample
b40edaafaba0090ab2f89f23aa0706711b17787921abfcdda5e9d72bbb53acc8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b40edaafaba0090ab2f89f23aa0706711b17787921abfcdda5e9d72bbb53acc8.exe
Resource
win10v2004-20220812-en
General
-
Target
b40edaafaba0090ab2f89f23aa0706711b17787921abfcdda5e9d72bbb53acc8
-
Size
818KB
-
MD5
36cf1fdf00212c794c2c3fc772aa9a48
-
SHA1
8a26576a197311429af26f718865b29e5709c5ec
-
SHA256
b40edaafaba0090ab2f89f23aa0706711b17787921abfcdda5e9d72bbb53acc8
-
SHA512
64a4a8c246215f0d90e2d7a986e60b19f5ecd034befd801e973b79bed3cb7489c36e90448bdca2a9c5fed1a1d4f3d42667f9887c5f5e2620d6aa64b18588e5ab
-
SSDEEP
12288:0xqZZX2LSbIFXR9k7VfsOyRnD2wZ35AOWA2aXuuRrGwsjiqTvY/c3Z4z+djqrKfE:0oZZmLSkkBfgRSc36lLqu+rG9wkxAAu
Malware Config
Signatures
Files
-
b40edaafaba0090ab2f89f23aa0706711b17787921abfcdda5e9d72bbb53acc8.exe windows x86
2d1edd288282a386bad359c593500bc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
ReadConsoleA
GetDiskFreeSpaceW
GetModuleHandleA
lstrcmpA
Heap32First
GetDriveTypeA
lstrcpynA
GetCurrentThreadId
GetPrivateProfileIntA
lstrcpynA
VirtualProtectEx
FormatMessageW
lstrcpynA
GetFileType
lstrcpynA
lstrcatA
OpenMutexW
GetVolumeInformationA
lstrcpynA
ReadFile
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
VirtualFree
GetSystemTime
lstrcpynA
SetThreadPriority
cmdial32
RasCustomDialDlg
AutoDialFunc
InetDialHandler
RasCustomDial
Sections
.text Size: 17KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ