Static task
static1
Behavioral task
behavioral1
Sample
0e16fc5f33559c64ecff53a2aadbf9ee5ad94379eb28df4a61913789de2cef64.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0e16fc5f33559c64ecff53a2aadbf9ee5ad94379eb28df4a61913789de2cef64.exe
Resource
win10v2004-20220414-en
General
-
Target
0e16fc5f33559c64ecff53a2aadbf9ee5ad94379eb28df4a61913789de2cef64
-
Size
100KB
-
MD5
4916ad763987ac3b69741dc82f0b2257
-
SHA1
99a3ca7bbf9d297b7d4b9b3d23f39fc991aac5b3
-
SHA256
0e16fc5f33559c64ecff53a2aadbf9ee5ad94379eb28df4a61913789de2cef64
-
SHA512
bac67efa265061880f202b9be40a91836e5c8fcc5796a7a6f385c6564a9cd80c0412a10f4cf6b82d7046aa3d9dc7dac5058551a60525fc64e33501a3fbd3529c
-
SSDEEP
1536:iziwSSN9KodfUr5zcLgQLo+Wt42Y3heN0IiSPoY6KTKD:eiwSSSodfwl4to+WVY3LSPoYHmD
Malware Config
Signatures
Files
-
0e16fc5f33559c64ecff53a2aadbf9ee5ad94379eb28df4a61913789de2cef64.exe windows x86
41133e981ff36edd9a4114c90662c38e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
CreateSemaphoreA
FindFirstFileW
DeviceIoControl
VerifyVersionInfoW
LeaveCriticalSection
SetThreadContext
DeleteCriticalSection
GetFileAttributesExW
GetFileSizeEx
GetDateFormatW
AreFileApisANSI
MoveFileW
IsBadStringPtrA
IsValidLocale
SetFilePointerEx
GlobalGetAtomNameW
GlobalAddAtomA
GetDriveTypeW
InterlockedCompareExchange
WriteConsoleInputA
GetDriveTypeA
DebugBreak
IsDBCSLeadByteEx
GetPrivateProfileIntW
GlobalFindAtomA
SetConsoleScreenBufferSize
FileTimeToLocalFileTime
GlobalFindAtomW
EnumResourceNamesW
ExpandEnvironmentStringsA
SetFileTime
GetPrivateProfileIntA
FindClose
ActivateActCtx
ReleaseSemaphore
GetNumberFormatW
GetVersionExW
OpenMutexW
SetNamedPipeHandleState
GetModuleHandleExW
LocalFileTimeToFileTime
GetTempPathA
GetProfileIntW
lstrcpyW
RtlUnwind
SetEnvironmentVariableA
GetStringTypeW
CreateFileMappingW
MoveFileExW
GetLocalTime
WinExec
LoadLibraryA
OutputDebugStringW
WriteConsoleA
TransactNamedPipe
SetPriorityClass
QueryPerformanceCounter
DeactivateActCtx
AllocConsole
GetSystemTimeAdjustment
CreateEventW
MoveFileA
LockResource
DeleteFileW
SetEnvironmentVariableW
FindResourceExA
InterlockedExchange
InterlockedDecrement
GetSystemTime
FormatMessageW
EnterCriticalSection
InterlockedPushEntrySList
GetUserDefaultUILanguage
GetPrivateProfileSectionNamesW
SetFileAttributesW
GlobalAddAtomW
VirtualProtect
EnumCalendarInfoA
GetTimeFormatW
SetStdHandle
FileTimeToDosDateTime
GetTempFileNameW
TlsSetValue
OpenMutexA
SystemTimeToFileTime
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ