Pi
Static task
static1
Behavioral task
behavioral1
Sample
916313a87db5fb4af0b6c201cc183634b3ada89373064595da046c61e93281f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
916313a87db5fb4af0b6c201cc183634b3ada89373064595da046c61e93281f9.exe
Resource
win10v2004-20220812-en
General
-
Target
916313a87db5fb4af0b6c201cc183634b3ada89373064595da046c61e93281f9
-
Size
699KB
-
MD5
7737f5a893ff637a1b59d19f90a991af
-
SHA1
2f4d36ba580c447e1fc3dd35e9a9114d489d59e7
-
SHA256
916313a87db5fb4af0b6c201cc183634b3ada89373064595da046c61e93281f9
-
SHA512
3020e191be34c036f6f62b803cb39b9b7ce7c1ee16afbe43a18f8e758e12951545c14bd09113afceac76248d2a7ee99c4569cfce78762db18e48edce4ddf2036
-
SSDEEP
12288:bE4l3Ip5Y+zVJwRHKzvkXus7g8lNEA7wgfOuFFkx1uhTthwaR8:BIp5R2RHPe+l+AjOM1taL
Malware Config
Signatures
Files
-
916313a87db5fb4af0b6c201cc183634b3ada89373064595da046c61e93281f9.exe windows x86
072282f00b7adea5aa065b86c9782efb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
HeapSize
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
RtlUnwind
MultiByteToWideChar
LCMapStringW
LoadLibraryW
OutputDebugStringW
WriteConsoleW
HeapQueryInformation
WriteFile
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
HeapFree
SetStdHandle
CreateFileW
CloseHandle
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
LoadLibraryA
GetLocalTime
GetProcessHeaps
GetProcAddress
GetCurrentDirectoryW
GetLastError
GetStdHandle
ExitProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
IsBadReadPtr
HeapValidate
SetConsoleCursorPosition
GetLogicalDrives
SystemTimeToFileTime
HeapAlloc
FillConsoleOutputCharacterA
lstrlenA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
RaiseException
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleHandleW
SetLastError
IsProcessorFeaturePresent
FlushFileBuffers
user32
GetWindow
GetWindowThreadProcessId
LoadCursorA
FindWindowA
UpdateWindow
SetWindowTextA
EndPaint
PostQuitMessage
SendDlgItemMessageA
GetTopWindow
LoadImageW
KillTimer
GetFocus
LoadIconA
wsprintfA
GetClientRect
ExitWindowsEx
SendMessageA
BeginPaint
GetDC
GetKeyboardLayout
UnregisterClassA
GetWindowLongA
ReleaseDC
SetClassLongA
GetDlgItem
DefWindowProcA
ShowWindow
SetMenu
GetClassInfoA
GetSystemMetrics
IsWindowVisible
gdi32
SetViewportExtEx
CreatePen
GetObjectW
GetTextMetricsA
GetStockObject
SetWindowExtEx
MoveToEx
LineTo
TextOutA
SelectObject
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
comdlg32
GetOpenFileNameA
ole32
CoInitialize
CoCreateInstance
userenv
GetProfilesDirectoryA
msacm32
acmStreamUnprepareHeader
version
GetFileVersionInfoW
imm32
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringA
ImmGetConversionStatus
ImmGetDefaultIMEWnd
ImmGetCandidateListA
Exports
Exports
Sections
.text Size: 462KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ