Static task
static1
Behavioral task
behavioral1
Sample
163de68e86a8cb26c4c53797735f213050d162ae1cd16d462fa73405483020c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
163de68e86a8cb26c4c53797735f213050d162ae1cd16d462fa73405483020c4.exe
Resource
win10v2004-20221111-en
General
-
Target
163de68e86a8cb26c4c53797735f213050d162ae1cd16d462fa73405483020c4
-
Size
163KB
-
MD5
18aecc447c8b6d4bb81ef35e2f4c7f30
-
SHA1
501bb686ce5ca2171da6e20f89d9a4d7a90979aa
-
SHA256
163de68e86a8cb26c4c53797735f213050d162ae1cd16d462fa73405483020c4
-
SHA512
3c795eb54049ec1da9bc4269384ffc7d6652429538c9339a16908f14414826f39986c55e98cfa28473f1aa7601f7ba1d5a07a38fd4b8144d3f373b78b2d0142f
-
SSDEEP
3072:pDAs6AkCcGkqWJuibdwHZdw/z1H24sqIc5ztJH72myvD5zPXcwBCEip5b:pT6AkCcGIRwHZdw/xH2RqP5zX6myvFXq
Malware Config
Signatures
Files
-
163de68e86a8cb26c4c53797735f213050d162ae1cd16d462fa73405483020c4.exe windows x86
3bed4bd21ee81d22d0a6db527a5e1ee1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
SizeofResource
LoadResource
LockResource
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ