Static task
static1
Behavioral task
behavioral1
Sample
adf16ac16c178a20b0c83182e91575f093c247255f5055f4ba9208a90f6789e1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
adf16ac16c178a20b0c83182e91575f093c247255f5055f4ba9208a90f6789e1.exe
Resource
win10v2004-20221111-en
General
-
Target
adf16ac16c178a20b0c83182e91575f093c247255f5055f4ba9208a90f6789e1
-
Size
84KB
-
MD5
ebaf145e7f0c1deecb445e4fc1c2436b
-
SHA1
e19841b40398e6fb3e7033c0bea26e9d86128b29
-
SHA256
adf16ac16c178a20b0c83182e91575f093c247255f5055f4ba9208a90f6789e1
-
SHA512
735eb3bf8a38a99bf6795115f92803c6fdcfb6b851524c94d7870d4acc3812a8827b074e57528575f3fcb5d3a0c5407c20950be4bcb97f0b269c7754e7fb0103
-
SSDEEP
1536:iT0iUy35cumA1ZnZw0Fe4LQZ9uzxUD5hzpGR5HTUHbUAE+o0c+pPUn:GBUyiM1ZnZwAeU8lFb9BW
Malware Config
Signatures
Files
-
adf16ac16c178a20b0c83182e91575f093c247255f5055f4ba9208a90f6789e1.exe windows x86
a4ccccc0aa872c22dd31eefb80974af4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CancelWaitableTimer
CloseHandle
WaitForSingleObjectEx
SetWaitableTimer
ReadFile
CreateWaitableTimerA
GetTickCount
CreateThread
VirtualQuery
ResumeThread
SetEvent
WaitForSingleObject
VirtualProtect
ExitThread
CreateEventA
LocalAlloc
advapi32
RegCloseKey
user32
SendMessageA
GetSystemMetrics
GetWindow
comdlg32
GetOpenFileNameA
ChooseFontA
GetFileTitleA
CommDlgExtendedError
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ