Static task
static1
Behavioral task
behavioral1
Sample
173c3e8a1a4e6d301f12eeda26be5123209f2caede31502de33ec0d9ab9eb940.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
173c3e8a1a4e6d301f12eeda26be5123209f2caede31502de33ec0d9ab9eb940.exe
Resource
win10v2004-20220901-en
General
-
Target
173c3e8a1a4e6d301f12eeda26be5123209f2caede31502de33ec0d9ab9eb940
-
Size
131KB
-
MD5
6cabf4ce76cdb5c4fbd186a6342b7df0
-
SHA1
d14d2822529ec988ddabcb48b471fabd6006f6b5
-
SHA256
173c3e8a1a4e6d301f12eeda26be5123209f2caede31502de33ec0d9ab9eb940
-
SHA512
d1dab4a02ea375c9de44986dd5c925755dbc9cdcf79512dce917b87d908ac24dc44aefd4574f4f173a70352715f781579641abfb88b2826c3360419774ac1e90
-
SSDEEP
3072:GGMTu0mY5CZeOfAsW/fogp73ymv3hPOzHc305LkQfg:yTuQ5CBxWHogB/ozi+f
Malware Config
Signatures
Files
-
173c3e8a1a4e6d301f12eeda26be5123209f2caede31502de33ec0d9ab9eb940.exe windows x86
0eb92414686f9db304c76a69070b75d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetCurrentProcess
SetLastError
LocalFlags
GetPrivateProfileIntA
DeviceIoControl
CreateDirectoryW
VirtualProtectEx
FindClose
GetPrivateProfileSectionA
RemoveDirectoryW
SetCommBreak
GetCurrentThread
CreateEventA
GetFileAttributesW
GetFileAttributesW
GetModuleHandleA
GlobalLock
GetStringTypeA
GetVersionExA
HeapFree
user32
GetWindowTextW
PostMessageW
DispatchMessageA
IsDialogMessageA
InsertMenuA
LoadCursorW
IsZoomed
SetFocus
SetCursorPos
wsprintfW
IsWindow
PeekMessageW
GetWindowLongW
netshell
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
HrCreateDesktopIcon
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ