Static task
static1
Behavioral task
behavioral1
Sample
1ab672f035d19219bd76c6642a64769bee5df2d0202371d204dd466eb0eee594.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ab672f035d19219bd76c6642a64769bee5df2d0202371d204dd466eb0eee594.exe
Resource
win10v2004-20220812-en
General
-
Target
1ab672f035d19219bd76c6642a64769bee5df2d0202371d204dd466eb0eee594
-
Size
818KB
-
MD5
c884db02d79b7176b1aace55b1941343
-
SHA1
5400a2115e9d2683005daaddd3f3a43d5c781dd7
-
SHA256
1ab672f035d19219bd76c6642a64769bee5df2d0202371d204dd466eb0eee594
-
SHA512
438951db2898a53ee3abc12c7b17a052f3a038eacadbf36c4e2d8d208b54698433175efd310c068aeebd9b400bd3b7970a5d2a2da45a5c482863cfdc7118a521
-
SSDEEP
12288:qPR5nOGaRmq0RKsnJUShVyxN8yJ9oyOM2PywHiJ7Zn46nhDPU8EiBYuOWHnsGLoz:qPRdMRm71nZsN8yJ9oyT2LC7dryG8v
Malware Config
Signatures
Files
-
1ab672f035d19219bd76c6642a64769bee5df2d0202371d204dd466eb0eee594.exe windows x86
fe9c9993eaa58fb5b8242cddb289d859
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
GetModuleHandleA
VirtualFree
lstrcpynA
lstrcpynA
GetSystemTime
ReadFile
lstrcpynA
GetDriveTypeA
GetCurrentThreadId
GetPrivateProfileIntA
lstrcpynA
SetThreadPriority
ReadConsoleA
OpenMutexW
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
GetDiskFreeSpaceW
GetFileType
lstrcpynA
lstrcpynA
lstrcpynA
lstrcmpA
GetVolumeInformationA
FormatMessageW
lstrcatA
lstrcpynA
Heap32First
cmdial32
RasCustomDial
InetDialHandler
RasCustomDialDlg
AutoDialFunc
Sections
.text Size: 17KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ