Static task
static1
Behavioral task
behavioral1
Sample
16ae74aa2313795bc62c1b3c36ffcc46d4e2cad0b1af4cdbc58a854b7ab0c3e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16ae74aa2313795bc62c1b3c36ffcc46d4e2cad0b1af4cdbc58a854b7ab0c3e9.exe
Resource
win10v2004-20221111-en
General
-
Target
16ae74aa2313795bc62c1b3c36ffcc46d4e2cad0b1af4cdbc58a854b7ab0c3e9
-
Size
100KB
-
MD5
f4c9e8a63192a7ac51fc4357de333610
-
SHA1
e2f053d46bd6ed422296c79e1a2c85ae7d3d15d5
-
SHA256
16ae74aa2313795bc62c1b3c36ffcc46d4e2cad0b1af4cdbc58a854b7ab0c3e9
-
SHA512
950d944e79b41d397979760f38f0ae7933032f3e83023284eeadbdd215bf012b64f9f308cd7953583f23493893489a7265e5399e2ecfa99502dc02d4df55aaf5
-
SSDEEP
3072:Xx+XWc6Uhav9nFp1f9OVFVZXirmHqBe9Daf:Vc6wop1OI8ri
Malware Config
Signatures
Files
-
16ae74aa2313795bc62c1b3c36ffcc46d4e2cad0b1af4cdbc58a854b7ab0c3e9.exe windows x86
f58144a53ba615f972fd5577d70c8534
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetThreadDesktop
GetActiveWindow
SetWindowLongW
IsCharAlphaNumericA
ValidateRect
EnumDesktopWindows
MoveWindow
SetWindowTextA
IsCharUpperW
ole32
CoRevokeClassObject
OleSetClipboard
CoEnableCallCancellation
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
GetUserDefaultLangID
GetCurrentThreadId
SetFileAttributesA
HeapFree
SizeofResource
GlobalHandle
GetThreadPriority
LocalAlloc
HeapCreate
LocalFree
LoadResource
FindResourceExA
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ