Static task
static1
Behavioral task
behavioral1
Sample
16cd81b8df740f868eb14f1a657e37c343554156f256a0c8bedb2027dea0d116.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
16cd81b8df740f868eb14f1a657e37c343554156f256a0c8bedb2027dea0d116.exe
Resource
win10v2004-20221111-en
General
-
Target
16cd81b8df740f868eb14f1a657e37c343554156f256a0c8bedb2027dea0d116
-
Size
449KB
-
MD5
09b477552c14bd308566c973313c25a0
-
SHA1
eb417d24393a8a150be23d0fdb70698afdead026
-
SHA256
16cd81b8df740f868eb14f1a657e37c343554156f256a0c8bedb2027dea0d116
-
SHA512
5b7f715b5bbfd79b49f48e2473a6c166ca912fc6b97b638450a6741cb0c7af2d74f16eff4dea97335247b284364e265aee084778a29851a688899b137ff21cfb
-
SSDEEP
6144:Ufapylgf1mq29CwaWGpAsedfdz53zRBk2kU+DO3gHq1R9Fxjp/c/c:Uw1mq2ci95tBEU+DSy4Hb/Oc
Malware Config
Signatures
Files
-
16cd81b8df740f868eb14f1a657e37c343554156f256a0c8bedb2027dea0d116.exe windows x86
568b23f64a7f448f8c7e674714aada8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ILCreateFromPathW
advapi32
LsaQueryInformationPolicy
user32
GetKBCodePage
GetInputDesktop
kernel32
GetCurrentProcess
Sections
.text Size: 442KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 291B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE