Static task
static1
Behavioral task
behavioral1
Sample
617c0f2c8c7e535c40861a4b343eb3c6d98e63cfa86cff18d9cc5d9fdc16c47c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
617c0f2c8c7e535c40861a4b343eb3c6d98e63cfa86cff18d9cc5d9fdc16c47c.exe
Resource
win10v2004-20220901-en
General
-
Target
617c0f2c8c7e535c40861a4b343eb3c6d98e63cfa86cff18d9cc5d9fdc16c47c
-
Size
25KB
-
MD5
0ac5c0eeb0707500c893707bf97600d0
-
SHA1
414da0902b639ab58cc5224a1ba9b0309370383e
-
SHA256
617c0f2c8c7e535c40861a4b343eb3c6d98e63cfa86cff18d9cc5d9fdc16c47c
-
SHA512
ff461508896ab807e35eeb9e866a731449ffc323d24026614bb20b5e02f122f8034ed8d9d1adae31012fbccfbedb6cff35e9c694afb7c654859539e962e6847f
-
SSDEEP
384:GF2wPg5s4yAczZ9DbotZIF9gav9rZsC0bxyOM+V6jsG2W67USp+:TwPFlrtboXIdvn0bsOM+cjsGw7Ug
Malware Config
Signatures
Files
-
617c0f2c8c7e535c40861a4b343eb3c6d98e63cfa86cff18d9cc5d9fdc16c47c.exe windows x86
47820782e667cc33880821fcad071586
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
SetLastError
WaitForMultipleObjects
GetEnvironmentVariableA
CreateFileA
CreateMutexW
Sleep
DeleteFileA
GetStartupInfoW
GetTickCount
FindClose
GetLocalTime
GetProfileIntA
GetFileAttributesW
HeapSize
GetModuleHandleA
ExitProcess
HeapCreate
GetFileSize
CloseHandle
ReleaseMutex
GetTickCount
GetStdHandle
RemoveDirectoryW
GetCurrentDirectoryA
user32
DispatchMessageW
CallWindowProcW
GetClassInfoA
GetWindowLongA
GetCursorPos
GetDC
GetDC
GetSysColor
PeekMessageA
DispatchMessageW
GetDC
MessageBoxA
GetDC
ctl3d32
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kocyyup Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE