Static task
static1
Behavioral task
behavioral1
Sample
b16b2bb7d5d7f5af69d573f13a4fb56c9775970c0e46371b36637a2343ef757d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b16b2bb7d5d7f5af69d573f13a4fb56c9775970c0e46371b36637a2343ef757d.exe
Resource
win10v2004-20220812-en
General
-
Target
b16b2bb7d5d7f5af69d573f13a4fb56c9775970c0e46371b36637a2343ef757d
-
Size
803KB
-
MD5
4c2b340b5691ee02f01021c5cd88c9f0
-
SHA1
cb6fe2e61966066a6afd3789bb2f3193c86fb092
-
SHA256
b16b2bb7d5d7f5af69d573f13a4fb56c9775970c0e46371b36637a2343ef757d
-
SHA512
30b0549fc936ec7fdb1c8aee2825ecce0251cba1442d20bb8d8d9c45c240f5c4b69e2ca63c22966d7f9a2989f5c7acdb7cc0834e360d97268024a2886a5aab2f
-
SSDEEP
24576:RvPSrRo/3Er8rp+ZWob/U9j6TqzWdlzAot/1iRk1:+s0r8rp+ZzQgT7LzAoF8I
Malware Config
Signatures
Files
-
b16b2bb7d5d7f5af69d573f13a4fb56c9775970c0e46371b36637a2343ef757d.exe windows x86
f7b78082b1e1abd61ab059e087f19d32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessVersion
HeapDestroy
FindAtomW
OpenEventW
GetVolumePathNameA
SetFileTime
GetDriveTypeW
GlobalFlags
SetFilePointer
CreateDirectoryA
LeaveCriticalSection
VirtualProtectEx
PulseEvent
CreateFileW
CreateFileW
DeleteFileW
GetCurrentThreadId
GetFileAttributesA
InterlockedExchange
GetModuleFileNameA
DeleteFileW
GetTickCount
OpenMutexA
GetModuleHandleA
GetConsoleMode
user32
DestroyIcon
MessageBoxA
IsMenu
SetFocus
PeekMessageA
DestroyMenu
DispatchMessageA
wsprintfA
SetRect
GetWindowLongA
LoadCursorA
GetWindowTextA
GetWindowLongA
dot3msm
DllMain
Dot3MsmFreeProfile
Dot3MsmDeInit
Dot3MsmDisconnect
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE