Static task
static1
Behavioral task
behavioral1
Sample
917a5274e9eadda3ac2a74938b29e01c13c7918457273cae11ba0b3095b51c1e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
917a5274e9eadda3ac2a74938b29e01c13c7918457273cae11ba0b3095b51c1e.exe
Resource
win10v2004-20220812-en
General
-
Target
917a5274e9eadda3ac2a74938b29e01c13c7918457273cae11ba0b3095b51c1e
-
Size
164KB
-
MD5
47df16aedf6fb73ea5b422965da1acea
-
SHA1
4996d0ec2d8144a51dba15ebc0c3ab9f722526fa
-
SHA256
917a5274e9eadda3ac2a74938b29e01c13c7918457273cae11ba0b3095b51c1e
-
SHA512
e17852cffa048c70cd629800ea82e520fc89c03c2549b910c8ef89788fb0c3dbcf0b1ff61fc28c3a894f921058f578a8eebf7f02aad9ef1abd14d06839eb5d6b
-
SSDEEP
3072:2ZXyYgnrSvaibUF51Pe7MHzuqive7p5FkCPmE8qPAJ4blRU:2ZXyYoWyi2zPyMHCqaC5FJPmE8GA+u
Malware Config
Signatures
Files
-
917a5274e9eadda3ac2a74938b29e01c13c7918457273cae11ba0b3095b51c1e.exe windows x86
d2bd1733fae78693f32ca01730305c97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strncpy
memcpy
_CIpow
floor
ceil
malloc
free
fseek
ftell
fread
fclose
fabs
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
HeapReAlloc
TlsAlloc
GetVersionExA
GetLogicalDriveStringsA
user32
DestroyIcon
FillRect
gdi32
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
winmm
mciSendCommandA
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ta Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
src Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ