Static task
static1
Behavioral task
behavioral1
Sample
166ec33d7a0b564897c9a3f88430f7b5bdaae2a95828e78fb9d82928021878e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
166ec33d7a0b564897c9a3f88430f7b5bdaae2a95828e78fb9d82928021878e5.exe
Resource
win10v2004-20220812-en
General
-
Target
166ec33d7a0b564897c9a3f88430f7b5bdaae2a95828e78fb9d82928021878e5
-
Size
43KB
-
MD5
58eb5599e4e3c8cc26d2962c78410eb0
-
SHA1
b8ac9ec0bab524007681bf36f2e6440ee8ba042a
-
SHA256
166ec33d7a0b564897c9a3f88430f7b5bdaae2a95828e78fb9d82928021878e5
-
SHA512
0c05069f6aa08844f0a13415f59758c96a16912ee46cf53ec026957f77c9dfbc6a9f7aedb4169cc85342fa9d80a7500a87cd381d4089f5338b01bcff87b0158e
-
SSDEEP
768:pHe/WmptS0Q/0ZI28xJoDvzIO+zC8gCri5IoZSAzcwf3MveTdX9y9YG:kRJI28xJkwO8gCu5IoZSAzcwf3MveTdQ
Malware Config
Signatures
Files
-
166ec33d7a0b564897c9a3f88430f7b5bdaae2a95828e78fb9d82928021878e5.exe windows x86
f4bd7ba3d816b8607ebef1ac1f8c13fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
comctl32
InitCommonControls
user32
CreateWindowStationA
shell32
DragQueryFileA
ShellExecuteA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ