Static task
static1
Behavioral task
behavioral1
Sample
169b0f700e2b2d4986a313e2af0f91b34a9c3ff07dffddf299ed7459eb59a5dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
169b0f700e2b2d4986a313e2af0f91b34a9c3ff07dffddf299ed7459eb59a5dc.exe
Resource
win10v2004-20220901-en
General
-
Target
169b0f700e2b2d4986a313e2af0f91b34a9c3ff07dffddf299ed7459eb59a5dc
-
Size
1.1MB
-
MD5
ec3e06dfe02b180b3b6080f4cac83231
-
SHA1
d0b0ef23577565ae83a61622426e09bdfaaa7932
-
SHA256
169b0f700e2b2d4986a313e2af0f91b34a9c3ff07dffddf299ed7459eb59a5dc
-
SHA512
8445800003a011eb9dd0569e49313c5a8849d24bbd435efb06e93f2bb3be0004e49bb3632fc1865558677613e7a333109d6788081c1345a4d83f8bc29df87b38
-
SSDEEP
24576:zpQg9aqTK/K5bvrrdMpmo4wxf1W32wUN+Y7jzJ/ptDTjw8DDi/htRK:zpQLlyxrqpmo42ptzXJ/zXw86
Malware Config
Signatures
Files
-
169b0f700e2b2d4986a313e2af0f91b34a9c3ff07dffddf299ed7459eb59a5dc.exe windows x86
1f95de5042f9807ba506bd56ffe3e2c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysAllocStringLen
advapi32
RegFlushKey
user32
SetTimer
kernel32
GetVersion
GetVersionExA
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
CreateDIBSection
version
VerQueryValueA
comctl32
ImageList_Destroy
Sections
.text Size: - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 835KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ