Static task
static1
Behavioral task
behavioral1
Sample
163d03b44d8ac95e2aac60998dba66dbb88913fd076f7f71583e43d6bf76ea2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
163d03b44d8ac95e2aac60998dba66dbb88913fd076f7f71583e43d6bf76ea2a.exe
Resource
win10v2004-20220901-en
General
-
Target
163d03b44d8ac95e2aac60998dba66dbb88913fd076f7f71583e43d6bf76ea2a
-
Size
4.7MB
-
MD5
79e4acd03778026a64585e257f279f8f
-
SHA1
10429b46b76b1395d98134d6b87d2bf5f891df31
-
SHA256
163d03b44d8ac95e2aac60998dba66dbb88913fd076f7f71583e43d6bf76ea2a
-
SHA512
7aacef3cd677a41deb9dd8048b6cfcc5b4b8c91001a0305d7c62665ed4a2ca893a0891e77e42e714bd5048d432ee43d92a6cfa6e7c64f57b922a0bb2ba97aa14
-
SSDEEP
98304:VLb01d9rYFQ9V19HG3veFMgZRRIN7xtlKJL+xxtNgD:V81LrYK95KuJRRS1xLgD
Malware Config
Signatures
Files
-
163d03b44d8ac95e2aac60998dba66dbb88913fd076f7f71583e43d6bf76ea2a.exe windows x86
ea330f4c222fa3aa0f676a54212240f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalHandle
lstrlenW
CreateJobObjectA
GetProcAddress
FreeUserPhysicalPages
GetModuleHandleA
EnumDateFormatsW
GetCurrentThreadId
GetCurrentProcessId
ResetWriteWatch
ntdll
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
Sections
C Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
W Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
C Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
C Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BNi Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
x1a Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eja Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
buU Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Imw Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PmT Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ