Static task
static1
Behavioral task
behavioral1
Sample
b17c5193a909b80f9ffcc8e7562f917fbff6d4c82e7927a8cf5f3c7502918e79.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b17c5193a909b80f9ffcc8e7562f917fbff6d4c82e7927a8cf5f3c7502918e79.exe
Resource
win10v2004-20220812-en
General
-
Target
b17c5193a909b80f9ffcc8e7562f917fbff6d4c82e7927a8cf5f3c7502918e79
-
Size
180KB
-
MD5
a0a928db64f46d79fcb15d83c492bc58
-
SHA1
01635dfdf257f47e09e9e50c3fa71a36c60a2c42
-
SHA256
b17c5193a909b80f9ffcc8e7562f917fbff6d4c82e7927a8cf5f3c7502918e79
-
SHA512
9d6406906e8c03d9921c217154f94a56a223ef8d696ee1cb51785ad7420b341ce37db8de4bb900664a00c9921a289b2ce6718f3ee1d9e6e36892bb77812c9f91
-
SSDEEP
1536:xWgtRPCehT5TBJ4L45Z7gpJEFf+Do020Wp4hmybzQ7tlsgdGy62Cv:xtxCi5jQ459Eo0A+hz+lpGt
Malware Config
Signatures
Files
-
b17c5193a909b80f9ffcc8e7562f917fbff6d4c82e7927a8cf5f3c7502918e79.exe windows x86
52d304c8b43f6dd5bc66262ca5c101a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
CloseHandle
GetLastError
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
Sleep
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
OpenFileMappingA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbopgjd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE