Static task
static1
Behavioral task
behavioral1
Sample
916157b3fc055440973698bef87d4970e2902a845e7936ca36ebf9eaee839cd7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
916157b3fc055440973698bef87d4970e2902a845e7936ca36ebf9eaee839cd7.exe
Resource
win10v2004-20220812-en
General
-
Target
916157b3fc055440973698bef87d4970e2902a845e7936ca36ebf9eaee839cd7
-
Size
220KB
-
MD5
99082a5c7d947d2ae50de747a2f4cb2f
-
SHA1
0216180843e01b17c6c211bb1a065797538dfed4
-
SHA256
916157b3fc055440973698bef87d4970e2902a845e7936ca36ebf9eaee839cd7
-
SHA512
b6a90b7445b59d824de6ec6db66bc7ab9aa7bc9ba87a831f16ac0bc22ad9d81b5cbddd2243a33526bb8938f80229f65fc4938ac888d09058625cd5ab4a6f5aa5
-
SSDEEP
6144:0Zg95gX629XfrhgkhX3EP+/LMdhX3EP+/LMwzzo0naGM:n9L29vP9TW9T/zPaGM
Malware Config
Signatures
Files
-
916157b3fc055440973698bef87d4970e2902a845e7936ca36ebf9eaee839cd7.exe windows x86
0ae56b52a23a35b4bec31c4fd2a43bdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
FormatMessageA
GetVersionExA
FreeLibrary
LocalFree
RemoveDirectoryA
FindNextFileA
DeleteFileA
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcatA
GetUserDefaultLangID
FindFirstFileA
GetFullPathNameA
GetDriveTypeA
GetCurrentDirectoryA
GetTimeZoneInformation
CreateFileA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
WriteFile
ReadFile
HeapSize
HeapReAlloc
LCMapStringW
LCMapStringA
GetModuleFileNameA
GetPrivateProfileStringA
GlobalFree
FindClose
GetSystemDirectoryA
GetLastError
Sleep
GetCommandLineA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
RtlUnwind
GetStartupInfoA
GetModuleHandleA
MultiByteToWideChar
SetCurrentDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
WideCharToMultiByte
GetVersion
HeapFree
HeapAlloc
CloseHandle
GetCPInfo
GetACP
GetOEMCP
user32
RegisterClassA
SetForegroundWindow
ShowWindow
MessageBoxA
FindWindowA
LoadStringA
DestroyWindow
IsDialogMessageA
IsWindow
DispatchMessageA
TranslateMessage
wsprintfA
PeekMessageA
GetSysColor
SendDlgItemMessageA
ClientToScreen
SetWindowTextA
GetClientRect
EndDialog
InvalidateRect
GetDC
ReleaseDC
DefWindowProcA
DialogBoxParamA
CreateDialogParamA
SetDlgItemTextA
GetDlgItem
SendMessageA
PostQuitMessage
LoadIconA
LoadCursorA
GetMessageA
CreateWindowExA
gdi32
RealizePalette
SelectPalette
SetBrushOrgEx
UnrealizeObject
SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
comctl32
InitCommonControlsEx
ord17
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ