Static task
static1
Behavioral task
behavioral1
Sample
316f77453758947fc644e3062f29fabaca501a87aa9a3dfea9f3d8186ca71e43.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
316f77453758947fc644e3062f29fabaca501a87aa9a3dfea9f3d8186ca71e43.exe
Resource
win10v2004-20220901-en
General
-
Target
316f77453758947fc644e3062f29fabaca501a87aa9a3dfea9f3d8186ca71e43
-
Size
637KB
-
MD5
67f8b5d169fb93def63e336f800b747f
-
SHA1
42d97b5919931026c99e5d8e7d805c7a5ffd2765
-
SHA256
316f77453758947fc644e3062f29fabaca501a87aa9a3dfea9f3d8186ca71e43
-
SHA512
abc845b0572d5e8f33cd4fba623c107a06982cd3b8e3fa078059b7e8c2da04662b4c84befcc5e4c3ad1ee63b50095efc39272238b0c6cb58811def9a32afa02e
-
SSDEEP
12288:JR1+jSpEoRzUA4Usj5sWUznwnprl76IkNjfCJaqYYNwJAULO4ywEWYd0:DEjSpEoRzU3UEgwnpR76IkEaMNwJAJel
Malware Config
Signatures
Files
-
316f77453758947fc644e3062f29fabaca501a87aa9a3dfea9f3d8186ca71e43.exe windows x86
9532da0fc1bb9ae965386899b1f6b91c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
FindAtomA
lstrlenA
CloseHandle
CompareFileTime
TlsFree
LoadLibraryA
HeapWalk
GetConsoleCP
GetTickCount
GlobalUnlock
WaitForSingleObject
GetStdHandle
GetVersion
GetAtomNameA
TlsGetValue
HeapReAlloc
GetModuleHandleA
VirtualProtect
GetProfileIntA
GetACP
user32
TranslateMessage
InflateRect
SubtractRect
GetMenuStringA
EnableScrollBar
ShowWindow
GetWindowTextA
UpdateWindow
CopyRect
LoadIconA
DialogBoxParamA
InsertMenuA
GetSubMenu
GetScrollRange
CreateCaret
GetMenu
DispatchMessageA
SetPropA
PaintDesktop
SetWindowPos
GetKeyboardLayout
ModifyMenuA
EqualRect
MessageBoxA
PostQuitMessage
DestroyMenu
GetDlgItem
PostMessageA
msi
MsiDoActionA
MsiEnumClientsA
MsiEnumProductsA
MsiGetMode
MsiCloseHandle
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ