Static task
static1
Behavioral task
behavioral1
Sample
1723822a1c024e85f0ef297a4efa21264da61287e5a139a4ed8ff532dd47de6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1723822a1c024e85f0ef297a4efa21264da61287e5a139a4ed8ff532dd47de6c.exe
Resource
win10v2004-20220812-en
General
-
Target
1723822a1c024e85f0ef297a4efa21264da61287e5a139a4ed8ff532dd47de6c
-
Size
832KB
-
MD5
70e47b7ab4ad60f68bc38bcc2a55a540
-
SHA1
83fdc97e06950d5350a2c8ae0c08ef306856d0d3
-
SHA256
1723822a1c024e85f0ef297a4efa21264da61287e5a139a4ed8ff532dd47de6c
-
SHA512
f2703f1fbddc974f02687ae66f02cacb52b19f4d8d2074d1210ff69f3f90bb47403829a8993fe3c1320a2b3f09722645a587d6f5dd56038f917fda4ba924e769
-
SSDEEP
12288:uJAlOzah5s6zi95FhkG2c7rSeT8ZgstMlkzbru83+GDw9eRobS8J3TaE+EL:EjqWcu53w+s+lebyGDUen8bT
Malware Config
Signatures
Files
-
1723822a1c024e85f0ef297a4efa21264da61287e5a139a4ed8ff532dd47de6c.exe windows x86
68eacfe9b2cb9fd5cb1921245db1590c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
LoadLibraryA
CreateFileMappingA
WriteConsoleA
CopyFileA
VirtualAlloc
GetVolumeInformationA
GetTimeFormatA
GetEnvironmentVariableA
ReadConsoleW
GetDriveTypeA
GetDiskFreeSpaceW
CopyFileA
CreateDirectoryA
HeapAlloc
FreeEnvironmentStringsW
CompareStringW
msdtcprx
DTC_XaForget
DTC_XaPrepare
DTC_XaStart
DTC_XaOpen
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 813KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ