Static task
static1
Behavioral task
behavioral1
Sample
517cd94ae13bd48d4f6a72784e39d0be8e861042713b15d6e78c933345c0fc58.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
517cd94ae13bd48d4f6a72784e39d0be8e861042713b15d6e78c933345c0fc58.exe
Resource
win10v2004-20220812-en
General
-
Target
517cd94ae13bd48d4f6a72784e39d0be8e861042713b15d6e78c933345c0fc58
-
Size
310KB
-
MD5
4ae0d0f581ccf0c3cdefeb26c6a76fc0
-
SHA1
f80fef8d6c240ab683f2eed94fef223d4771cc24
-
SHA256
517cd94ae13bd48d4f6a72784e39d0be8e861042713b15d6e78c933345c0fc58
-
SHA512
d1d125dd4c0a3080bdaeebfffa299c918987ab2d6a702a149bb053684b2f1f756230aa5c52fdf5ebd370cbebfa055b955e154f91dde65898165c558cfe5df29c
-
SSDEEP
6144:jcBGqDQoc/xyjRzcC0ikp14xQ4I6az6D4jP1r82Q8QuZUGYCh14:jcBGqsYeC0b4xVI666D4julu2G/hi
Malware Config
Signatures
Files
-
517cd94ae13bd48d4f6a72784e39d0be8e861042713b15d6e78c933345c0fc58.exe windows x86
fe0b1be409b4b8c98f66c189fa11dd41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
FindResourceW
GetPrivateProfileIntA
GetACP
InterlockedIncrement
WriteFileEx
Heap32First
GetDiskFreeSpaceW
SetEnvironmentVariableA
GetDiskFreeSpaceW
GetPrivateProfileSectionA
ExitProcess
Sleep
WaitForSingleObject
GetPrivateProfileIntA
LoadLibraryA
GetExitCodeProcess
lstrcpyW
InterlockedDecrement
VirtualAllocEx
GetModuleHandleW
Sleep
GetLongPathNameA
apphelp
AllowPermLayer
SdbCreateMsiTransformFile
ApphelpCheckIME
ApphelpCheckExe
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ