Static task
static1
Behavioral task
behavioral1
Sample
17032687ab5e013497714dbc4f0f7c2114ef37c0f949c5231477756dda5ff760.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
17032687ab5e013497714dbc4f0f7c2114ef37c0f949c5231477756dda5ff760.exe
Resource
win10v2004-20220812-en
General
-
Target
17032687ab5e013497714dbc4f0f7c2114ef37c0f949c5231477756dda5ff760
-
Size
320KB
-
MD5
a349e7b2b571aba382a1058c4aade530
-
SHA1
4f8a480f423019da572ddd515eb5fe24dc685bc3
-
SHA256
17032687ab5e013497714dbc4f0f7c2114ef37c0f949c5231477756dda5ff760
-
SHA512
ae5e933df0d0d765803e34592523db24839b6b3426f5404d5f416d3f303352692eede738291f22e5a6aa53d0dd0e492e2fa006f31990d8478b980922f46f7ead
-
SSDEEP
6144:J1G/xN8GwH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Br2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
17032687ab5e013497714dbc4f0f7c2114ef37c0f949c5231477756dda5ff760.exe windows x86
a89a0cca2c4d4672ceb9171164d6adc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveLocalAlternateComputerNameA
GetProfileIntA
WritePrivateProfileStructA
CallNamedPipeW
SetFileAttributesA
GlobalLock
AddLocalAlternateComputerNameA
VirtualBufferExceptionHandler
IsBadStringPtrA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE