Static task
static1
Behavioral task
behavioral1
Sample
171633d7d76aa116b5770119e1bc690a0884ea3a863b5152d9b52820ced3a22a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
171633d7d76aa116b5770119e1bc690a0884ea3a863b5152d9b52820ced3a22a.exe
Resource
win10v2004-20221111-en
General
-
Target
171633d7d76aa116b5770119e1bc690a0884ea3a863b5152d9b52820ced3a22a
-
Size
891KB
-
MD5
d9111639bd96d2bd941c92b2d5a8e582
-
SHA1
0b70b6a35bc8b4f65cd96fe3a4d56579e02216b0
-
SHA256
171633d7d76aa116b5770119e1bc690a0884ea3a863b5152d9b52820ced3a22a
-
SHA512
9f8c6b11687065d1525602cf60faf501dfee75b6260e886ca8129059601ed7a632deb772d343186584f2362dd1678172d989fc88746860d848f7f4f5b5d4d9ae
-
SSDEEP
12288:ziLZQvz73Vu9ez6Ep5xJXPPt9DjPnCyxo2x4ltzrshle1:ziLZQvzxuc6ETvDbnuFlBg+1
Malware Config
Signatures
Files
-
171633d7d76aa116b5770119e1bc690a0884ea3a863b5152d9b52820ced3a22a.exe windows x86
4215be09c167fd0e742573831e511ccc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetModuleFileNameA
VirtualAlloc
GetProcAddress
GetCurrentThreadId
FindFirstFileW
Sleep
TlsGetValue
GetCPInfo
VirtualFree
GetConsoleCP
GetEnvironmentVariableA
GetCurrentProcessId
WideCharToMultiByte
SetUnhandledExceptionFilter
GetCurrentDirectoryA
LocalFree
GetOEMCP
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 533KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ