Static task
static1
Behavioral task
behavioral1
Sample
c16011b2e831a648197570de3cc553e4b7d8e68fc29c87c1553baab76de3d540.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c16011b2e831a648197570de3cc553e4b7d8e68fc29c87c1553baab76de3d540.exe
Resource
win10v2004-20220812-en
General
-
Target
c16011b2e831a648197570de3cc553e4b7d8e68fc29c87c1553baab76de3d540
-
Size
385KB
-
MD5
9231d4d7858590db671faf4f6a75460f
-
SHA1
3f79d2619e5e0f3c8647c30b1eef2e400ff84da2
-
SHA256
c16011b2e831a648197570de3cc553e4b7d8e68fc29c87c1553baab76de3d540
-
SHA512
9943b7f41a77c6049001fa6fe1fa5b9889bb2b8af02726e9683dbc4f9a5438a20bb0155c145dd514a3be103453037cd201b668e394831991501685971bf2654f
-
SSDEEP
12288:UE4Skfuk5k9820R9Hf9Bkd/iIg4qOQviUynbFI:UE4lbW82wF2Bi/9NObFI
Malware Config
Signatures
Files
-
c16011b2e831a648197570de3cc553e4b7d8e68fc29c87c1553baab76de3d540.exe windows x86
142cd9c6836a56408e44e484dd9d69c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
crypt32
RegQueryValueExU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU
kernel32
CreateFileA
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle
gdi32
UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
advapi32
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 379KB - Virtual size: 879KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE