Static task
static1
Behavioral task
behavioral1
Sample
17d8a71a60900c2153807b23333d7de3bd736a2bdd56985126d3e58af533e8cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17d8a71a60900c2153807b23333d7de3bd736a2bdd56985126d3e58af533e8cf.exe
Resource
win10v2004-20220901-en
General
-
Target
17d8a71a60900c2153807b23333d7de3bd736a2bdd56985126d3e58af533e8cf
-
Size
260KB
-
MD5
0e96888f6874963a85baf0b2a71fc4ad
-
SHA1
a226a8612e319170586477da57cd6be8308d1773
-
SHA256
17d8a71a60900c2153807b23333d7de3bd736a2bdd56985126d3e58af533e8cf
-
SHA512
198b8b33e7e783fd22d2891ef806f5e06cfcb374c2bad9d69d7227c78bc8d5265a9be3c7b9a45d099d81e7491b29dcf47fde0aa89aba485f90cd974af8904450
-
SSDEEP
3072:89bCAeIAD3aJEbPwFYylR5z990gvWjObSbbHKtlg8VWrauBl1505savZ9lEt5ydc:xAZADKrF55zL08+OGbbHKXQmZdkzcgww
Malware Config
Signatures
Files
-
17d8a71a60900c2153807b23333d7de3bd736a2bdd56985126d3e58af533e8cf.exe windows x86
b0e3952d997b0d6eeffc0751c381c189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
MiniDumpWriteDump
lz32
LZStart
GetExpandedNameA
LZOpenFileA
LZRead
LZClose
LZDone
LZInit
LZSeek
kernel32
TlsGetValue
SetEnvironmentVariableA
SetConsoleCtrlHandler
GetLocaleInfoW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetProfileStringA
VirtualProtect
GetSystemInfo
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
Sleep
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetLastError
GetCurrentThread
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetProcAddress
VirtualAlloc
HeapReAlloc
IsBadWritePtr
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE