Static task
static1
Behavioral task
behavioral1
Sample
17aae0ea6535d3452595a99f9699455af5e1454f57b49ac4c5de9bb8c570084c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
17aae0ea6535d3452595a99f9699455af5e1454f57b49ac4c5de9bb8c570084c.exe
Resource
win10v2004-20221111-en
General
-
Target
17aae0ea6535d3452595a99f9699455af5e1454f57b49ac4c5de9bb8c570084c
-
Size
100KB
-
MD5
6ca2cca1558ab8c351976ab301fa57ae
-
SHA1
04fb09b644efddd5c4b6bacd57f722f5beb55b04
-
SHA256
17aae0ea6535d3452595a99f9699455af5e1454f57b49ac4c5de9bb8c570084c
-
SHA512
7e1b063bfcc49d21a3e705369de5bb91e90136ce0bc0136df474d94097b4e819cd815107160ddcfd3fbdddeb50076addc7205388d91968b2eefda01dbd3d8e7e
-
SSDEEP
1536:PQ9qzQM5OetFNCroTO7PsloLLeNeJg3e6iUNlYulEn5pI6C2oJFJdgT/S1VEde:PQH1etFNCgOr0oLSBNiUNKuT6kdgAV+e
Malware Config
Signatures
Files
-
17aae0ea6535d3452595a99f9699455af5e1454f57b49ac4c5de9bb8c570084c.exe windows x86
957aed776d5251bfc0e44db1272efdea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ntdll
RtlCreateUserProcess
user32
GrayStringA
PostThreadMessageA
ValidateRgn
WindowFromDC
ImpersonateDdeClientWindow
gdi32
StrokePath
SetBkMode
SetArcDirection
SaveDC
RoundRect
PaintRgn
LineTo
GetSystemPaletteEntries
GetNearestColor
GetMapMode
GetDCBrushColor
GetBkMode
GetBkColor
AbortPath
CreatePatternBrush
Ellipse
GetArcDirection
msimg32
TransparentBlt
shlwapi
SHCopyKeyW
rasapi32
RasClearLinkStatistics
comctl32
DSA_InsertItem
aclui
EditSecurity
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ