Static task
static1
Behavioral task
behavioral1
Sample
163be99b078178ac665a4fbcead9610361d814265d982ccf3189033a761b9385.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
163be99b078178ac665a4fbcead9610361d814265d982ccf3189033a761b9385.exe
Resource
win10v2004-20220812-en
General
-
Target
163be99b078178ac665a4fbcead9610361d814265d982ccf3189033a761b9385
-
Size
572KB
-
MD5
e4f1ee02de2f68dc8efabb93ebc6c537
-
SHA1
6b478fde74cb4001fe4836be38ca5b521872a9b3
-
SHA256
163be99b078178ac665a4fbcead9610361d814265d982ccf3189033a761b9385
-
SHA512
066da392369a6b743e7871f2c24cf4a63dcecae5fdfc26db5c013a2ddd50f16c082a76b7477d553b732ce73d8ffbf990241a3f511448d17ba63a50fcbb25e0aa
-
SSDEEP
12288:rJiiArznUjCWjHMSfckXKx0NDGC2rb3srKa/R+:rUznUjCWjsV6DNyyKa/R+
Malware Config
Signatures
Files
-
163be99b078178ac665a4fbcead9610361d814265d982ccf3189033a761b9385.exe windows x86
0028a666ed86ef5b03655f13040b1b45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetCommandLineW
SetCurrentDirectoryW
OutputDebugStringA
OutputDebugStringW
DecodePointer
RaiseException
GetLastError
SetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
SetEvent
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
FindResourceExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadResource
LockResource
SizeofResource
GetConsoleCP
LoadLibraryA
LoadLibraryW
FindResourceW
SetDllDirectoryW
WideCharToMultiByte
FreeLibrary
IsDebuggerPresent
GetCurrentThread
VirtualProtect
GetCurrentProcessId
MultiByteToWideChar
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
SetEndOfFile
CreateFileW
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FindFirstFileExW
GetConsoleMode
ReadFile
LocalFree
FindClose
GetTimeZoneInformation
SetFilePointerEx
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
GetTimeFormatW
GetSystemTimeAsFileTime
EncodePointer
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetACP
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileType
GetDateFormatW
ReadConsoleW
user32
wsprintfW
PostThreadMessageW
MessageBoxW
GetDesktopWindow
SetWindowsHookExW
CallNextHookEx
ole32
CoUninitialize
CoReleaseServerProcess
CoAddRefServerProcess
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathFindFileNameW
Sections
.text Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ