Static task
static1
Behavioral task
behavioral1
Sample
977ca2ae9a3e414459a7ad23d8f93ee13e11eaf1d8de5b82bc967167333c5436.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
977ca2ae9a3e414459a7ad23d8f93ee13e11eaf1d8de5b82bc967167333c5436.exe
Resource
win10v2004-20221111-en
General
-
Target
977ca2ae9a3e414459a7ad23d8f93ee13e11eaf1d8de5b82bc967167333c5436
-
Size
818KB
-
MD5
fac2f401787fe1480ce4ee7849a00f49
-
SHA1
bdf8f00a8bf8a35902314753e477f9a45eb09200
-
SHA256
977ca2ae9a3e414459a7ad23d8f93ee13e11eaf1d8de5b82bc967167333c5436
-
SHA512
c7b6697bbb62408984cd9b5ca26a78cd89667294297474a965563a3f056385f50005937b789413708295210865005294e422a8a028a7c61d58e3bdd74aef70eb
-
SSDEEP
12288:dirc3QYQOt6worbOWIme12hwtIImy/al4/mtLp0XmjKz3eIZC:uz9rb212hSII1/s4OtLeZHs
Malware Config
Signatures
Files
-
977ca2ae9a3e414459a7ad23d8f93ee13e11eaf1d8de5b82bc967167333c5436.exe windows x86
8442bf2b6ed846e865d2d11f5fda8fa4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
lstrcatA
SetThreadPriority
WriteFile
ReadConsoleA
GetDiskFreeSpaceW
GetDriveTypeA
lstrcpynA
lstrcpynA
OpenMutexW
GetModuleHandleA
lstrcpynA
lstrcpynA
GetVolumeInformationA
lstrcpynA
GetSystemTime
GetPrivateProfileIntA
lstrcpynA
GetCurrentDirectoryA
GetCurrentThreadId
lstrcpynA
lstrcmpW
FindFirstVolumeA
Heap32First
GetFileType
VirtualFree
lstrcpynA
lstrcpynA
lstrcpynA
cmdial32
RasCustomDialDlg
RasCustomDial
AutoDialFunc
InetDialHandler
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ