Static task
static1
Behavioral task
behavioral1
Sample
168cbf2d87170b3416ed4faf56d4b29d44ac53375064ac7f8cc33620e9c78981.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
168cbf2d87170b3416ed4faf56d4b29d44ac53375064ac7f8cc33620e9c78981.exe
Resource
win10v2004-20220901-en
General
-
Target
168cbf2d87170b3416ed4faf56d4b29d44ac53375064ac7f8cc33620e9c78981
-
Size
19KB
-
MD5
72a3d4db1999f41f6becec3bd51b250f
-
SHA1
7f2df61486b44847f018a578eb665dad76e2c984
-
SHA256
168cbf2d87170b3416ed4faf56d4b29d44ac53375064ac7f8cc33620e9c78981
-
SHA512
20477334b224837b787649e09f969f770e9351b6e254adafb679b562d6c40772fb1c8380e52a03c01578c916757eba65370c78978ebd53e88ff378cbc433bb4c
-
SSDEEP
384:Mj+imqn7LjQjEt7oX5+Fmd+vrmUpXNeeeeeBa:Mj+KQ87oXY5vrmUxP
Malware Config
Signatures
Files
-
168cbf2d87170b3416ed4faf56d4b29d44ac53375064ac7f8cc33620e9c78981.exe windows x86
0be61fbf9c83b5867b5dc27cf54f24a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetLogicalDrives
VirtualProtect
HeapDestroy
CreateFileMappingA
InterlockedExchange
GetModuleHandleA
GetCurrentThread
GetTapeStatus
IsDebuggerPresent
GetCurrentProcessId
GetStdHandle
DeleteAtom
GetCommConfig
CreateHardLinkA
GetEnvironmentStringsA
LoadLibraryExA
GetTimeFormatA
WaitForSingleObject
GetACP
GetProcessVersion
user32
SetActiveWindow
GetClassNameA
FillRect
ShowWindow
DrawTextA
ReleaseDC
GetDlgItem
GetWindowTextLengthA
wsprintfA
FrameRect
GetFocus
GetWindow
GetCursorPos
GetTitleBarInfo
EndPaint
GetParent
DragDetect
SetForegroundWindow
BeginPaint
advapi32
RegFlushKey
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ