Static task
static1
Behavioral task
behavioral1
Sample
167869b848595169f4904a6707270f0611d4498e1668600b63114776e0263c6d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
167869b848595169f4904a6707270f0611d4498e1668600b63114776e0263c6d.exe
Resource
win10v2004-20220901-en
General
-
Target
167869b848595169f4904a6707270f0611d4498e1668600b63114776e0263c6d
-
Size
697KB
-
MD5
38a64ecbbfd94ea29a57d2d678c77569
-
SHA1
af75fe593319dc6f3af5edf32ec100490115ca0b
-
SHA256
167869b848595169f4904a6707270f0611d4498e1668600b63114776e0263c6d
-
SHA512
513eb1958504ef2852b5ae14f08bea7bff5b4351caebc43b21effc1455d8e3c55682ebba3fae97b6279571119fa3e788d8473dfd30c65e27feb325a4b3bfb061
-
SSDEEP
6144:UYAN1K0sHda0dUXJFyj9mSacdPQiQvbiUFsIpiIpF8TEz5JvjPFYBAA/1OsrQn/7:U1eYaUXJo3QtvbiUVpFRz/jPEbLtFUr
Malware Config
Signatures
Files
-
167869b848595169f4904a6707270f0611d4498e1668600b63114776e0263c6d.exe windows x64
80af4ee28260afc10b852a42f1578c0f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
WSACleanup
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
wininet
FtpOpenFileW
psapi
GetProcessMemoryInfo
iphlpapi
IcmpSendEcho
userenv
LoadUserProfileW
uxtheme
IsThemeActive
user32
GetDC
gdi32
LineTo
comdlg32
GetOpenFileNameW
advapi32
GetAce
shell32
DragFinish
ole32
CoGetObject
oleaut32
UnRegisterTypeLi
Sections
.MPRESS1 Size: 590KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE