Static task
static1
Behavioral task
behavioral1
Sample
17c57a0edad62c639a7c8cc6165f6f26967bced84c015a5a3860db972fa3b54b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
17c57a0edad62c639a7c8cc6165f6f26967bced84c015a5a3860db972fa3b54b.exe
Resource
win10v2004-20220812-en
General
-
Target
17c57a0edad62c639a7c8cc6165f6f26967bced84c015a5a3860db972fa3b54b
-
Size
71KB
-
MD5
9774095e9a7d2e3a1a028efcf37db8de
-
SHA1
a4a40be6d0029fe1609d0675c5d3a5b0a2f1a0ac
-
SHA256
17c57a0edad62c639a7c8cc6165f6f26967bced84c015a5a3860db972fa3b54b
-
SHA512
cc4e9a02e9ba16766abd1215c8530b9fddb7aa3c5fa14840143938041b13700ff09a3ac9e7ffe82b4e0ee5712f36de9167cf51075e768f600715d2d3f23296c3
-
SSDEEP
1536:orfvoLIyOmGUUMUW3y7Ur8bLIdK3wKBrkGS0sPu/gwMfiMKo/9NOpwwk6AkgeU:KQLIyOmjhUJUIIdK3PIWM0olNywwjAbL
Malware Config
Signatures
Files
-
17c57a0edad62c639a7c8cc6165f6f26967bced84c015a5a3860db972fa3b54b.exe windows x86
a091deba70276869635a70af5888097c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
CreateToolhelp32Snapshot
CopyFileW
GetVolumeInformationW
SetConsoleTitleA
GetLinguistLangSize
RtlCaptureContext
GetCPInfo
OpenFileMappingA
WriteProfileStringW
FillConsoleOutputAttribute
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE