Static task
static1
Behavioral task
behavioral1
Sample
1651c16a613fee5eb8fee073be14a8c5120b1ab6140f14be634ca49a808765dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1651c16a613fee5eb8fee073be14a8c5120b1ab6140f14be634ca49a808765dc.exe
Resource
win10v2004-20220812-en
General
-
Target
1651c16a613fee5eb8fee073be14a8c5120b1ab6140f14be634ca49a808765dc
-
Size
57KB
-
MD5
91b144565a1f5da082387d56ada6ad70
-
SHA1
c18ccd62335fbf9895bc7e8f8902bab8fa128337
-
SHA256
1651c16a613fee5eb8fee073be14a8c5120b1ab6140f14be634ca49a808765dc
-
SHA512
32334b44d557227d90b77a9bd045e00d0f2f4cb69dfd4e83ff2954f9e168f839816bd56222cf57a3547cf725b97fc581b7e170f3f0ed4d8870fe20650ff4028e
-
SSDEEP
768:zaDT8/s3kWuorsFcf6kMWuwiP4N83KbC/LgHxFy/trtKIw5wWf1EW5cjydVr:eDT8k0xorsFS6kM7P4N8GRWle5j5cy
Malware Config
Signatures
Files
-
1651c16a613fee5eb8fee073be14a8c5120b1ab6140f14be634ca49a808765dc.exe windows x86
9685d9e851eedf96c4e1533f204e76a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedIncrement
GetTickCount
Sleep
VirtualFree
InterlockedIncrement
Sleep
VirtualFree
GetStdHandle
CloseHandle
fde
DllGetClassObject
quartz
AMGetErrorTextA
DBToAmpFactor
advapi32
RegQueryValueExA
RegOpenKeyExA
ole32
OleDraw
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
IsValidPtrIn
IsValidPtrOut
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetMalloc
CoUninitialize
CoInitialize
crypt32
RegQueryValueExU
RegDeleteValueU
RegEnumValueU
RegOpenKeyExU
RegSetValueExU
Sections
.text Size: 1024B - Virtual size: 973B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE