Static task
static1
Behavioral task
behavioral1
Sample
16e5951f3467aef145387fd2b36ee175105822a9f90c3bc66ea0309b36a1ef38.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
16e5951f3467aef145387fd2b36ee175105822a9f90c3bc66ea0309b36a1ef38.exe
Resource
win10v2004-20220901-en
General
-
Target
16e5951f3467aef145387fd2b36ee175105822a9f90c3bc66ea0309b36a1ef38
-
Size
167KB
-
MD5
6b9bc10f5c5bbc78520b6f130fee1fea
-
SHA1
e1ebcbba283d461181f638b8a3a4d09aff1e4976
-
SHA256
16e5951f3467aef145387fd2b36ee175105822a9f90c3bc66ea0309b36a1ef38
-
SHA512
3a4f078c5a3a7c1238fd110c4090bc8e7fe599ebaf0b05d96df9561b15e3b0f306bc5201cb588f285fde4be77abe6be98edaaf59e8617a119a85a77d6c5f16d5
-
SSDEEP
3072:qsIZ64JKS5Ukj1zZdRAVfM9jyOG4VJ7cRRUqQpF:qsIZ64J15NxzZsVfM9jyRSRcRRUqQpF
Malware Config
Signatures
Files
-
16e5951f3467aef145387fd2b36ee175105822a9f90c3bc66ea0309b36a1ef38.exe windows x86
c50c61ad9147d47c5a6407065535a791
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
gdi32
GetTextMetricsA
DeleteObject
GetTextExtentPointA
SelectObject
GetDeviceCaps
CreateFontIndirectA
kernel32
GetLastError
GetACP
GetCPInfoExA
GetThreadLocale
FreeEnvironmentStringsA
WideCharToMultiByte
GetOEMCP
GetEnvironmentStrings
InterlockedExchange
lstrlenW
GetCPInfo
EnterCriticalSection
GetLocaleInfoA
GetTickCount
InitializeCriticalSection
WriteFile
EnumResourceTypesA
TlsGetValue
GetFileType
SetHandleCount
GetEnvironmentStringsW
InterlockedIncrement
GetStartupInfoA
FreeEnvironmentStringsW
GetStdHandle
LoadLibraryW
HeapSize
DeleteCriticalSection
QueryPerformanceCounter
UnhandledExceptionFilter
GetVersionExA
LeaveCriticalSection
RaiseException
TlsSetValue
MultiByteToWideChar
GetCurrentProcessId
ole32
CoGetMalloc
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ