Static task
static1
Behavioral task
behavioral1
Sample
816d36e8063ed554175f3626544acbb4345d5e1f91923925cde44906aa18124d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
816d36e8063ed554175f3626544acbb4345d5e1f91923925cde44906aa18124d.exe
Resource
win10v2004-20220812-en
General
-
Target
816d36e8063ed554175f3626544acbb4345d5e1f91923925cde44906aa18124d
-
Size
131KB
-
MD5
27acc0268ef98e29e16b2d8564ad6c00
-
SHA1
f0a840878d7bd2536097e97add53b56ff8c0ada8
-
SHA256
816d36e8063ed554175f3626544acbb4345d5e1f91923925cde44906aa18124d
-
SHA512
adb8eed17adc589f03e5e85242793d5f618bb4977733763a4103dcce272052d678488fd47a03c1d6d9b7380eb36e74ae77c366edcca5171415924f2d055987e7
-
SSDEEP
3072:dbvVVZODVdAXNZmUd8Xu3lR8fHV6oOJi5gFaCF:dZVZODV8Z9d8+VmPV6LYalF
Malware Config
Signatures
Files
-
816d36e8063ed554175f3626544acbb4345d5e1f91923925cde44906aa18124d.exe windows x86
c7c6f980de317c9d304236f8c919152a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringA
ole32
CoInitialize
CoUninitialize
user32
GetCursorPos
LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassW
EnumClipboardFormats
kernel32
CloseHandle
FlushConsoleInputBuffer
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
LocalFree
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WriteFile
lstrcmpA
lstrcpyA
lstrlenA
CreateFileA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
gdi32
DeleteObject
GetStockObject
Sections
AUTO Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 123KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ