Static task
static1
Behavioral task
behavioral1
Sample
16517d6adce0dbc3b1583f7942fc9b1a1812d404a8f9576053e9b7fb6ab8f60f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16517d6adce0dbc3b1583f7942fc9b1a1812d404a8f9576053e9b7fb6ab8f60f.exe
Resource
win10v2004-20220901-en
General
-
Target
16517d6adce0dbc3b1583f7942fc9b1a1812d404a8f9576053e9b7fb6ab8f60f
-
Size
148KB
-
MD5
0ed9c7714d434b879297fb99bd727250
-
SHA1
6dbd6df1c2bce6999ad6746fe5a4965d5b6ca8d8
-
SHA256
16517d6adce0dbc3b1583f7942fc9b1a1812d404a8f9576053e9b7fb6ab8f60f
-
SHA512
dde584513ce61a3d33b74f24e524bfaa5a68e7ed2734304be04eae923fc2a76d8817bf787e8dce5e1ce4e3df79dd74a15f3dfd2ba7530f51c1df92c68ebeed5e
-
SSDEEP
1536:KreFqC1swIvt7qiYVKvhvmK9pLJObAWvuJ4Y7bvK2sj:t1MvNqBV4LJMWJ4Y7bv8
Malware Config
Signatures
Files
-
16517d6adce0dbc3b1583f7942fc9b1a1812d404a8f9576053e9b7fb6ab8f60f.exe windows x86
25964ba3568b87469377e9b43d8d719d
Headers
Imports
kernel32
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
WritePrivateProfileStringA
WaitForSingleObject
VirtualQuery
SystemTimeToFileTime
Sleep
LoadLibraryA
GetTickCount
GetSystemTime
GetSystemDirectoryA
GetProcAddress
GetPrivateProfileStringA
GetModuleFileNameA
FreeLibrary
ExitThread
CreateThread
CreateMutexA
CopyFileA
CloseHandle
user32
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
wvsprintfA
TranslateMessage
MessageBoxA
LoadStringA
GetMessageA
DispatchMessageA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegCloseKey
oleaut32
SysFreeString
SysReAllocStringLen
shell32
ShellExecuteA
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
ws2_32
shutdown
listen
send
__WSAFDIsSet
closesocket
select
connect
socket
recv
bind
WSACleanup
WSAStartup
Sections
MEW Size: 144KB - Virtual size: 144KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE