Static task
static1
Behavioral task
behavioral1
Sample
817cc8a1e1ec53b62e378756741ad1da6ffd82c5b529e65a74f07c052194a2fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
817cc8a1e1ec53b62e378756741ad1da6ffd82c5b529e65a74f07c052194a2fc.exe
Resource
win10v2004-20220812-en
General
-
Target
817cc8a1e1ec53b62e378756741ad1da6ffd82c5b529e65a74f07c052194a2fc
-
Size
168KB
-
MD5
04e4bea5622af33e09a1f032259ccf31
-
SHA1
17996d5a806f0417be2b86323a0a27ac11688bf8
-
SHA256
817cc8a1e1ec53b62e378756741ad1da6ffd82c5b529e65a74f07c052194a2fc
-
SHA512
47d8a9c99fe9d3b55e7154599c9548d3a747eb6ab05dcdd51a4bfebb77b203852f5e519f11379337c2f0f5b17ccb2c3c4337d5a7f469b424c15109d90ab2a0cd
-
SSDEEP
1536:1ssnMLtDnht3tUsejiIZEWtiVIxFzoih:1ssMdhdtUHjcWtiVIxFz
Malware Config
Signatures
Files
-
817cc8a1e1ec53b62e378756741ad1da6ffd82c5b529e65a74f07c052194a2fc.exe windows x86
ecfcacd76e99f7267ec60d732224785b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetCurrentProcess
CreateProcessA
ExitProcess
ReleaseMutex
OpenMutexA
InterlockedExchange
CreateThread
GetLastError
CreateMutexA
SetPriorityClass
GetModuleFileNameA
GetStartupInfoA
ResumeThread
SetThreadPriority
GetCurrentThread
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetVersionExA
GetModuleHandleA
SetErrorMode
CreateFileA
VirtualAlloc
VirtualQueryEx
ReadProcessMemory
GetThreadContext
TerminateProcess
SetThreadContext
VirtualProtectEx
VirtualFree
ReadFile
GetFileSize
SetFilePointer
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GlobalMemoryStatusEx
GetSystemDefaultUILanguage
FreeLibrary
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GetCurrentProcessId
LoadLibraryA
GetProcAddress
OutputDebugStringA
Sleep
lstrcmpiA
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
WriteFile
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FlushFileBuffers
user32
ExitWindowsEx
MessageBoxA
wsprintfA
advapi32
AdjustTokenPrivileges
StartServiceCtrlDispatcherA
CreateServiceA
RegOpenKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenServiceA
CloseServiceHandle
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ws2_32
WSACleanup
connect
send
socket
closesocket
shutdown
setsockopt
htons
htonl
sendto
inet_addr
gethostbyname
recv
__WSAFDIsSet
select
WSAStartup
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE