Static task
static1
Behavioral task
behavioral1
Sample
e16cc2b5394bd03334a166d3da995dc4f0484d74ec08bd164ad342afcd08a543.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e16cc2b5394bd03334a166d3da995dc4f0484d74ec08bd164ad342afcd08a543.exe
Resource
win10v2004-20220901-en
General
-
Target
e16cc2b5394bd03334a166d3da995dc4f0484d74ec08bd164ad342afcd08a543
-
Size
238KB
-
MD5
5b248ed708e52c4f780b6ac675c775d5
-
SHA1
5f5d32dd36e9f4e77f81158f7e7053b8b6798e1a
-
SHA256
e16cc2b5394bd03334a166d3da995dc4f0484d74ec08bd164ad342afcd08a543
-
SHA512
064768f140a10a73e859e7029443aaa5cf9daf33320ebedcd29e9bb464f8d4d377ded6092395436bb0001fade669d028b3501606e8075b11bc11616126db96af
-
SSDEEP
6144:BXZUMoXLY2KOknQiMOTU3A5SWWkG3IrF7qU2fwkwbRvWS3Smj:BRoc9Q3OT931GEVq/Nw9vWeRj
Malware Config
Signatures
Files
-
e16cc2b5394bd03334a166d3da995dc4f0484d74ec08bd164ad342afcd08a543.exe windows x86
f5eb72f8d69b07abccc20de1c5a5add2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
lstrcpyA
SwitchToThread
SetUnhandledExceptionFilter
GetStartupInfoW
HeapAlloc
SetErrorMode
lstrlenA
ExitProcess
msvcrt
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
user32
MessageBoxW
CreateWindowExA
TranslateMessage
DefWindowProcW
DispatchMessageW
UpdateWindow
ShowWindow
MessageBoxA
GetMessageW
powrprof
IsPwrHibernateAllowed
IsPwrShutdownAllowed
GetPwrCapabilities
wintrust
WintrustGetRegPolicyFlags
crypt32
CryptStringToBinaryA
imagehlp
ImageEnumerateCertificates
Sections
CODE Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ink Size: 1024B - Virtual size: 613B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE