Static task
static1
Behavioral task
behavioral1
Sample
173fa11df59596daceb74478ff7fa5d160875ed07c77c7507d21b6452fbda95a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
173fa11df59596daceb74478ff7fa5d160875ed07c77c7507d21b6452fbda95a.exe
Resource
win10v2004-20220812-en
General
-
Target
173fa11df59596daceb74478ff7fa5d160875ed07c77c7507d21b6452fbda95a
-
Size
87KB
-
MD5
0dc44f28bdcd8daacd91db48e26723f5
-
SHA1
610bb28a35614a17194009aa384ac1e3375e85f0
-
SHA256
173fa11df59596daceb74478ff7fa5d160875ed07c77c7507d21b6452fbda95a
-
SHA512
893096fdb238d98fd965d6b4fc47dd5a83a7de1c15f041a340a75d13c877f5d935f537af6aa45964409bc799edc1915dcae13aae9c65bab3fcdbe3d7cebe0de4
-
SSDEEP
1536:C49oTFTj/hs8M5BbbQnMcMmAccHMFVGZlRjRsNjG2KOAcQsnx2uX:C49o5Tj/mfngMBdMFVG3RjRsNHVX
Malware Config
Signatures
Files
-
173fa11df59596daceb74478ff7fa5d160875ed07c77c7507d21b6452fbda95a.exe windows x86
1e8d37f44827f18cdd0033db286b1186
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
__p___initenv
_XcptFilter
_initterm
calloc
__set_app_type
_adjust_fdiv
_except_handler3
_exit
__p__commode
_controlfp
atan2
__setusermatherr
__p__fmode
kernel32
FileTimeToLocalFileTime
SetErrorMode
DeleteFileA
QueryPerformanceCounter
GetProcessHeap
GlobalHandle
VirtualProtectEx
lstrcatA
GetCurrentProcessId
GetStringTypeExA
GetModuleFileNameA
GetWindowsDirectoryA
WideCharToMultiByte
SetFileTime
GetOEMCP
FileTimeToDosDateTime
GetConsoleMode
FileTimeToSystemTime
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE