Static task
static1
Behavioral task
behavioral1
Sample
017f0b5922398fb623f6d96653443b3cf36c7a411c44b84dd3b7cbed7d1744bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
017f0b5922398fb623f6d96653443b3cf36c7a411c44b84dd3b7cbed7d1744bf.exe
Resource
win10v2004-20220812-en
General
-
Target
017f0b5922398fb623f6d96653443b3cf36c7a411c44b84dd3b7cbed7d1744bf
-
Size
37KB
-
MD5
70add051a2e1cb245c00d1ce31a56337
-
SHA1
d1dff477df25cd10fa73f4cf8f1b4329fc924aef
-
SHA256
017f0b5922398fb623f6d96653443b3cf36c7a411c44b84dd3b7cbed7d1744bf
-
SHA512
33c4207cabea222ad51c24106a34e22cb907b6bffffaa70413cb4ef28ab4f2deb84fa24a3a00b6cb10a8517ae9dd88ce04730cea40bcfa96116dc93d2908f0d6
-
SSDEEP
768:QWpSyNFIhok5I0A4Ce9NifIL4DRU4/fLI0Yr7Jz+5v39FYBB9GXDSM2EHIW:xSy3Ge0A4Ce9RXxnr7JzGvtUODSMpHIW
Malware Config
Signatures
Files
-
017f0b5922398fb623f6d96653443b3cf36c7a411c44b84dd3b7cbed7d1744bf.exe windows x86
8a71d90964cfaa2b6ed7a385eaf97dda
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WinExec
lstrlenA
lstrcatA
GetProcAddress
GetModuleHandleA
GetEnvironmentVariableA
IsBadReadPtr
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
Sleep
GetFullPathNameA
CopyFileA
lstrcpyA
DeleteFileW
ExpandEnvironmentStringsA
LoadLibraryA
lstrlenW
VirtualFreeEx
CreateDirectoryA
GetSystemDirectoryA
lstrcpyW
lstrcatW
MultiByteToWideChar
GetVersionExA
GetModuleFileNameA
CreateFileMappingA
MapViewOfFile
SetLastError
UnmapViewOfFile
GetFileSize
SetFilePointer
ReadFile
LocalAlloc
CloseHandle
LocalFree
VirtualFree
VirtualAlloc
user32
CharUpperA
MessageBoxA
advapi32
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
imagehlp
CheckSumMappedFile
ntdll
NtSetSystemInformation
RtlInitUnicodeString
NtCreateFile
ZwLoadDriver
NtDeleteFile
RtlUnwind
psapi
EnumProcessModules
GetModuleBaseNameA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE