Static task
static1
Behavioral task
behavioral1
Sample
16225275e560c73b02a9a8ea3457fce82c5e94112ec54ed32f9b0f5a93ad33f1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
16225275e560c73b02a9a8ea3457fce82c5e94112ec54ed32f9b0f5a93ad33f1.exe
Resource
win10v2004-20221111-en
General
-
Target
16225275e560c73b02a9a8ea3457fce82c5e94112ec54ed32f9b0f5a93ad33f1
-
Size
3.0MB
-
MD5
f240bd87870b5c3870e7d1a5b7f4c9e6
-
SHA1
bd7ef4ad0af1358d5765bb607d0d2f127f889b94
-
SHA256
16225275e560c73b02a9a8ea3457fce82c5e94112ec54ed32f9b0f5a93ad33f1
-
SHA512
144a96916bfc56e198283ce0760873e87d0181beba115b5b3d93604559690a879f881e836472011ef3664e7b6c7d41be0f3a82375144641522713240dd3b8dbe
-
SSDEEP
49152:jinRmufpfqDitcdrtPKF8Q8quLuP/xM9ibI4w3zTziSA4fTV:ORrcVS8mGuPJk48zirY5
Malware Config
Signatures
Files
-
16225275e560c73b02a9a8ea3457fce82c5e94112ec54ed32f9b0f5a93ad33f1.exe windows x86
c9749513208288305099900ce01b1603
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
lstrcmpA
lstrlenA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetModuleFileNameA
VirtualAlloc
VirtualFree
user32
wsprintfA
MessageBoxA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.gentee Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ