Static task
static1
Behavioral task
behavioral1
Sample
a16c63222739c3b962187a426270f51536422260cf278c39049c151b869d1334.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a16c63222739c3b962187a426270f51536422260cf278c39049c151b869d1334.exe
Resource
win10v2004-20220812-en
General
-
Target
a16c63222739c3b962187a426270f51536422260cf278c39049c151b869d1334
-
Size
810KB
-
MD5
6757889629b9d0ac98d78fb332aad181
-
SHA1
a24be10ce58586e6a32b2df21c76d1c64ef5a698
-
SHA256
a16c63222739c3b962187a426270f51536422260cf278c39049c151b869d1334
-
SHA512
c595480522b0b0b9fd02ad0ba2253461645f791c5767a455fbf1609f0bd29070179d6ca7f0d5e7b38bf072a8e3d4bba7958f450c8c7f1ff14f8b981c1ea15809
-
SSDEEP
24576:y+1WXBiFXOyOV7niruZuUItONisciM+RkKQz:y+1Wx8POh3ZuidciMSPQ
Malware Config
Signatures
Files
-
a16c63222739c3b962187a426270f51536422260cf278c39049c151b869d1334.exe windows x86
18f9736cde6c010948fb206068d6958f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLogicalDrives
VirtualProtect
GetModuleHandleW
lstrcpyW
GetLogicalDrives
GetFileAttributesA
GetLogicalDrives
GetLogicalDriveStringsW
GetTickCount
GetLogicalDrives
GetStringTypeA
GetStdHandle
OpenMutexW
CreateEventA
SetCurrentDirectoryW
GetModuleHandleA
scecli
SceSetupGenerateTemplate
SceOpenPolicy
InitializeChangeNotify
DeltaNotify
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ydata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.kdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ