Static task
static1
Behavioral task
behavioral1
Sample
516dbcfbaec6026b1cd28035f00cf8120a79664431711122322c55ba71284230.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
516dbcfbaec6026b1cd28035f00cf8120a79664431711122322c55ba71284230.exe
Resource
win10v2004-20220901-en
General
-
Target
516dbcfbaec6026b1cd28035f00cf8120a79664431711122322c55ba71284230
-
Size
766KB
-
MD5
814332ddc2ccd9022c61eda8be05e8f0
-
SHA1
17ba5e6b36b79796253a700e5ef2407540adc206
-
SHA256
516dbcfbaec6026b1cd28035f00cf8120a79664431711122322c55ba71284230
-
SHA512
1bebe45fe31e228619fc32d2b3c36034617cc92e1c942e71c46d3de34a66209a3067b76deda6aa6c70f4032491edb7c8043e126afd265f2a6adc56ffd4e4b9e1
-
SSDEEP
12288:C3HjDfPZFGNH8qVKRpQBRGdVEEPOvTw0KdG4wxWEi/lJo1SmgXDyHBKdO1NXmgiz:CXjbPZct8KK7GBEPOvTw0/xWEslaXguv
Malware Config
Signatures
Files
-
516dbcfbaec6026b1cd28035f00cf8120a79664431711122322c55ba71284230.exe windows x86
14deffdd6a1ebc05cf7ba85cf30d4118
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
CreateFileA
DeleteFileW
GetStartupInfoA
GetProcessHeap
GetTickCount
VirtualProtect
CreateDirectoryW
GetLocalTime
Sleep
SetLastError
CreateSemaphoreA
ReadConsoleW
CreateMutexW
GetPriorityClass
CreateHardLinkW
HeapSize
OpenSemaphoreA
LoadLibraryA
SetLastError
GetFileAttributesA
GetFileSize
GetStdHandle
MapViewOfFile
SetEvent
userenv
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
FindServices
SsdpStartup
CleanupCache
SsdpCleanup
Sections
.text Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE