Static task
static1
Behavioral task
behavioral1
Sample
96878e682eb3815e9d9f49006b7bd1113297d498b94310b929a34b4474c2b2c0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96878e682eb3815e9d9f49006b7bd1113297d498b94310b929a34b4474c2b2c0.exe
Resource
win10v2004-20221111-en
General
-
Target
96878e682eb3815e9d9f49006b7bd1113297d498b94310b929a34b4474c2b2c0
-
Size
818KB
-
MD5
68316ed5d93a94c975a2908cf7836dfa
-
SHA1
9714ac4c49940f8c4d6162c40d8196b9cc5a41a8
-
SHA256
96878e682eb3815e9d9f49006b7bd1113297d498b94310b929a34b4474c2b2c0
-
SHA512
8fb8d1db239ae4e964a5b38b32e3d7f93ee3fc6b8e1b7aca59565be0b7dd41200d864915b69e7af429b270592074ee6593647b71ef905bef7940ac26c6b818c7
-
SSDEEP
12288:bKhuNRdte/KrGkws0O0UOImOH0Y+/1FaOLficGuHFD4RZVeOtgyQvVcQMMA/d6:LNRdt7vwsX0UXmOUFrV5HF/Ly2VFA/Y
Malware Config
Signatures
Files
-
96878e682eb3815e9d9f49006b7bd1113297d498b94310b929a34b4474c2b2c0.exe windows x86
7cbc06c2d29141cb98bd8932f14004b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
Heap32First
SetThreadPriority
GetCurrentDirectoryA
lstrcpynA
lstrcmpA
FormatMessageW
GetPrivateProfileIntA
GetSystemTime
OpenMutexW
GetModuleHandleA
GetFileType
lstrcpynA
lstrcpynA
GetVolumeInformationA
VirtualProtectEx
lstrcpynA
GetDiskFreeSpaceW
VirtualFree
lstrcpynA
GetDriveTypeA
GetCurrentThreadId
ReadConsoleA
ReadFile
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
lstrcpynA
cmdial32
RasCustomDialDlg
AutoDialFunc
RasCustomDial
InetDialHandler
Sections
.text Size: 17KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ