Static task
static1
Behavioral task
behavioral1
Sample
17d508186f2e16015965ebfb94cf1cc8d50ce79f1020576697eaf816a96fb6b4.exe
Resource
win7-20220901-en
General
-
Target
17d508186f2e16015965ebfb94cf1cc8d50ce79f1020576697eaf816a96fb6b4
-
Size
872KB
-
MD5
7bd4a1daa49a42d00e5afbb893bafcf0
-
SHA1
057042ec35a84d9c486f49b69ae0c51054409d61
-
SHA256
17d508186f2e16015965ebfb94cf1cc8d50ce79f1020576697eaf816a96fb6b4
-
SHA512
2a2fa8ca109b2afa6104266068e6d6e233b943a2a2a36a2a8b0ce94fbbf526d59803461905e62179034e5209c1e87916653fe7e5c58a9ea30ed434dab82eb07a
-
SSDEEP
12288:OLEYBlIv6fhutn0v7en54jCOA7EQ5NdBMLAuFOl+o+zj2CYNiqSISo+vMktRP5pD:OLTEns6+9AQQ51MZeCciqShfXvPcRN2
Malware Config
Signatures
Files
-
17d508186f2e16015965ebfb94cf1cc8d50ce79f1020576697eaf816a96fb6b4.exe windows x86
68049f84c98b1a2d03ea718cbc57d437
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
MoveFileExW
CreateFileW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
user32
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
BeginPaint
EndPaint
PostQuitMessage
EndDialog
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
UpdateWindow
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 833KB - Virtual size: 833KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ