Static task
static1
Behavioral task
behavioral1
Sample
6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114.exe
Resource
win10v2004-20220812-en
General
-
Target
6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114
-
Size
818KB
-
MD5
24083ac143587071ef01ef03a8ecf14d
-
SHA1
06b5b17fe06e7db1eb75ee654276d5ad6c71b5b3
-
SHA256
6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114
-
SHA512
78f83562d96aa11b0d85e1db54cde47b6992e8592be213a4a0be5cadef73b39791dec7ee2568ec2592c21a126d601d3d66d4a3a1d516254f40d0baff9579f9dd
-
SSDEEP
24576:0YRFo5yNIr0XykOktX44aeYBM9D8KKKCk:1RFo5y2YX1O044aeYg8KKl
Malware Config
Signatures
Files
-
6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114.exe windows x86
7830b289fdf5eab1901de99aab5a2f1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetVolumeInformationA
lstrcpynA
lstrcpynA
VirtualFree
lstrcpynA
ReadConsoleA
SetThreadPriority
lstrcpynA
GetFileType
GetCurrentThreadId
lstrcpynA
VirtualProtectEx
lstrcpynA
GetModuleHandleA
lstrcpynA
lstrcpynA
Heap32First
lstrcmpW
lstrcpynA
GetDiskFreeSpaceW
GetSystemTime
OpenMutexW
GetPrivateProfileIntA
FindFirstVolumeA
GetCurrentDirectoryA
WriteFile
lstrcpynA
GetDriveTypeA
cmdial32
AutoDialFunc
RasCustomDial
InetDialHandler
RasCustomDialDlg
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ