Static task
static1
Behavioral task
behavioral1
Sample
170f20f1cc7a02e645fa9c59ade0ce1c5ae3d72f2ee770b71e9eb6113de16f3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
170f20f1cc7a02e645fa9c59ade0ce1c5ae3d72f2ee770b71e9eb6113de16f3b.exe
Resource
win10v2004-20220812-en
General
-
Target
170f20f1cc7a02e645fa9c59ade0ce1c5ae3d72f2ee770b71e9eb6113de16f3b
-
Size
498KB
-
MD5
37f2872552f6c8fe3f44b077df47aa40
-
SHA1
3a3edc615fba85fbc23f69f02ffa131151576ba0
-
SHA256
170f20f1cc7a02e645fa9c59ade0ce1c5ae3d72f2ee770b71e9eb6113de16f3b
-
SHA512
b4b89fbb73d65da3e5f7022bf2f3a8aa7e8d40fe6480cb769fb99e31b6ae999aa9ff285353b67f4afcafc8d71a80df06f7c76e92ab436371fd8e15b70b64b2db
-
SSDEEP
12288:ps7EV5zbR/CuRWuwXdTSNdEMOAGC4/XvsgtCxL8FxnTPX5AQW:puE7PBbRWpsT/GX3sgtCB8FxjpO
Malware Config
Signatures
Files
-
170f20f1cc7a02e645fa9c59ade0ce1c5ae3d72f2ee770b71e9eb6113de16f3b.exe windows x86
47b763c0d38d0b18cb04139d32c02ec9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DlgDirSelectComboBoxExW
CharUpperBuffW
GetInputState
ntdll
RtlpUnWaitCriticalSection
NtSetHighEventPair
kernel32
GetSystemDefaultLCID
Sections
.text Size: 491KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE