Static task
static1
Behavioral task
behavioral1
Sample
159e0ef73c086dadc4529845d3f3fd6ddaf80124ad9c850255a59e6b128efa77.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
159e0ef73c086dadc4529845d3f3fd6ddaf80124ad9c850255a59e6b128efa77.exe
Resource
win10v2004-20220812-en
General
-
Target
159e0ef73c086dadc4529845d3f3fd6ddaf80124ad9c850255a59e6b128efa77
-
Size
818KB
-
MD5
be622e28a59c8fcb9b8729f53ac82883
-
SHA1
861a2fcec89696c6b7fa862fb32bcfc24fe74622
-
SHA256
159e0ef73c086dadc4529845d3f3fd6ddaf80124ad9c850255a59e6b128efa77
-
SHA512
e1f880ddd5990dd15f4d00fd7bd5e77923bdeb4c9e6af2b1d9808712464db7b832c8038df84629a88a49947ea0e15ee1080bf73dd64617aa59749c98ac6b5a2c
-
SSDEEP
24576:TNq1+vfsPebyRjXUG4lr3f79ufMQGdoVMqnxKEoCpBE:T01+fNbyyG4ZPpzleV7s
Malware Config
Signatures
Files
-
159e0ef73c086dadc4529845d3f3fd6ddaf80124ad9c850255a59e6b128efa77.exe windows x86
90711e4a4c9b5e55c554f5214a9d37fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexW
lstrcpynA
lstrcpynA
SetThreadPriority
GetDiskFreeSpaceW
ReadConsoleA
lstrcpynA
GetVolumeInformationA
lstrcpynA
GetSystemTime
VirtualFree
lstrcpynA
lstrcpynA
GetFileType
lstrcpynA
VirtualProtectEx
Heap32First
FindFirstVolumeA
GetCurrentDirectoryA
WriteFile
GetPrivateProfileIntA
GetCurrentThreadId
lstrcpynA
lstrcatA
lstrcmpW
lstrcpynA
GetDriveTypeA
GetModuleHandleA
lstrcpynA
cmdial32
RasCustomDial
InetDialHandler
AutoDialFunc
RasCustomDialDlg
Sections
.text Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ