Static task
static1
Behavioral task
behavioral1
Sample
917fa5baf49e22e84efaded9489bae51466b4be3823118dadd5f3d6835b6ac62.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
917fa5baf49e22e84efaded9489bae51466b4be3823118dadd5f3d6835b6ac62.exe
Resource
win10v2004-20220812-en
General
-
Target
917fa5baf49e22e84efaded9489bae51466b4be3823118dadd5f3d6835b6ac62
-
Size
81KB
-
MD5
30cf084eeeb56ee7c01a2e214f348d76
-
SHA1
2b43dfd8c398a4925ea66653d351f84af669d3e3
-
SHA256
917fa5baf49e22e84efaded9489bae51466b4be3823118dadd5f3d6835b6ac62
-
SHA512
f94dc5a93122999ad35dd3c07bc0db08cfd88ad0e4dc55c7768b3d75e441f290d5a259237cf5401cbc407d50223eb513b03eb3d45f891872b0ff49be2f423f16
-
SSDEEP
384:PJG14lR/NpKAN+UJfo8vJh/7neuwyv3ZUKcreuDreuwyv3ZUKcreuDz:RFtFe8vJtDeunUreufeunUreuf
Malware Config
Signatures
Files
-
917fa5baf49e22e84efaded9489bae51466b4be3823118dadd5f3d6835b6ac62.exe windows x86
c714cc45299e14ccc149ee1227222831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
kernel32
ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
SetUnhandledExceptionFilter
Sleep
msvcrt
_strupr
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_iob
_setmode
_stat
__getmainargs
atexit
exit
fclose
fgetc
fopen
fputc
free
__p__environ
malloc
memset
remove
signal
strcat
strcpy
strncat
strstr
system
time
__set_app_type
user32
MessageBoxA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ