Static task
static1
Behavioral task
behavioral1
Sample
176ddc0da63df1a84afc2d51d5d99a5e29311e7f904942eb10a8ac4dd1976821.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
176ddc0da63df1a84afc2d51d5d99a5e29311e7f904942eb10a8ac4dd1976821.exe
Resource
win10v2004-20221111-en
General
-
Target
176ddc0da63df1a84afc2d51d5d99a5e29311e7f904942eb10a8ac4dd1976821
-
Size
52KB
-
MD5
7c512fc47cd8aa4714be446ad6b8df10
-
SHA1
5ad0c69159ce51ef323d921e35aff75da28e5934
-
SHA256
176ddc0da63df1a84afc2d51d5d99a5e29311e7f904942eb10a8ac4dd1976821
-
SHA512
c38f9cbfa7dc5d3bba3813f34d1f61ee9a6e842c1428b5f4d8aeac0241d9dbfb615a4657f1ae2dd44738750dc97eb303573b1427e58a0b5f31bb332fa961a16a
-
SSDEEP
1536:A8G3thoC5bhI9wdco+PWM6vRLjWzwtDG0Jhu08dbpCD:vG3tL5hcoVHvRL9DNf8dw
Malware Config
Signatures
Files
-
176ddc0da63df1a84afc2d51d5d99a5e29311e7f904942eb10a8ac4dd1976821.exe windows x86
dd11c7e3009a9039e0c98474df910777
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
msvcrt
__CxxFrameHandler
_adjust_fdiv
kernel32
lstrcpyA
InterlockedExchange
GetLocalTime
Sleep
SetEvent
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
LoadLibraryA
VirtualAlloc
InterlockedDecrement
IsDBCSLeadByte
GetVersion
GetDiskFreeSpaceA
GetLocaleInfoA
ExitProcess
user32
PostMessageW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ