Static task
static1
Behavioral task
behavioral1
Sample
b17e1c72981386c347a6fc8810e0b9e3a7f9cf26290693d3f074f9454efaaac9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b17e1c72981386c347a6fc8810e0b9e3a7f9cf26290693d3f074f9454efaaac9.exe
Resource
win10v2004-20221111-en
General
-
Target
b17e1c72981386c347a6fc8810e0b9e3a7f9cf26290693d3f074f9454efaaac9
-
Size
219KB
-
MD5
3219a2d167266ceca7046fee8fb49e12
-
SHA1
42694b587fa97386d66a62b3f695fa4f25215781
-
SHA256
b17e1c72981386c347a6fc8810e0b9e3a7f9cf26290693d3f074f9454efaaac9
-
SHA512
9fa06733de2a8bd4abc97d9d5c0399c9530bd9997a16d143cb3c526c89357960ebf99df90304bdbd12c7d2af93e7b3f67c39d88046cd3a993a86b277305a0431
-
SSDEEP
6144:wRc4X0NJJHl72eBYShSYxQk6qnESbfrQ:iExH16YxsqnN/Q
Malware Config
Signatures
Files
-
b17e1c72981386c347a6fc8810e0b9e3a7f9cf26290693d3f074f9454efaaac9.exe windows x86
a32147337a76b4e67e1833ee0d6c2603
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
comctl32
ImageList_Add
gdi32
BitBlt
user32
ActivateKeyboardLayout
ole32
CoCreateInstance
oleaut32
GetActiveObject
Sections
.text Size: 209KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE