Static task
static1
Behavioral task
behavioral1
Sample
617ffbaba24dbafef1b999c26fd04aaf287c5985ca86c5aa1c4b5a849c74d905.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
617ffbaba24dbafef1b999c26fd04aaf287c5985ca86c5aa1c4b5a849c74d905.exe
Resource
win10v2004-20220812-en
General
-
Target
617ffbaba24dbafef1b999c26fd04aaf287c5985ca86c5aa1c4b5a849c74d905
-
Size
182KB
-
MD5
3f2e7bcc46645c3e26e202276d664e20
-
SHA1
436774d365c7eecb73d2e232761cf34e7c001151
-
SHA256
617ffbaba24dbafef1b999c26fd04aaf287c5985ca86c5aa1c4b5a849c74d905
-
SHA512
13f339154b083d651bb5698c3e117cfdfba267752417a44dad10a5a70c7b84c9658d0db4360c73e41bdb3fb950a9c84d1458207e084d4638bc5f493b9a3dd2af
-
SSDEEP
3072:RJJkUidTlm9tWLHnHnTMgZjuNadbLtNNVFsb7l9h59OtuRT:RJJkUGxTv0cdLxwh3Ot
Malware Config
Signatures
Files
-
617ffbaba24dbafef1b999c26fd04aaf287c5985ca86c5aa1c4b5a849c74d905.exe windows x86
c77ec8be8abce8d88d24b21f640ffc72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
GetOEMCP
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LCMapStringA
GetFileType
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
RtlUnwind
TerminateProcess
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetEnvironmentVariableA
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeEnvironmentStringsW
ExitProcess
CreateFileMappingA
CreateEventA
LCMapStringW
CloseHandle
advapi32
SetServiceStatus
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
InitializeSecurityDescriptor
StartServiceCtrlDispatcherA
shell32
SHAddToRecentDocs
SheSetCurDrive
ShellExecuteA
FreeIconList
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ