Static task
static1
Behavioral task
behavioral1
Sample
a16a0d054c7ccac7036a989d55b396ad72c0157f8764347112d5abb9299fd552.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a16a0d054c7ccac7036a989d55b396ad72c0157f8764347112d5abb9299fd552.exe
Resource
win10v2004-20221111-en
General
-
Target
a16a0d054c7ccac7036a989d55b396ad72c0157f8764347112d5abb9299fd552
-
Size
214KB
-
MD5
fa0ba3b5a42817ebac707cfa8ee5febe
-
SHA1
1683d7dea454812bc15c258ea7d23fc1e4138658
-
SHA256
a16a0d054c7ccac7036a989d55b396ad72c0157f8764347112d5abb9299fd552
-
SHA512
207332ae1d5b2671b1183473978f3ce309d0dac58b7da2b1db472c7fb16f3b4d8fb82f873456418211e8bddb43568fb5de650943767d7e3b9080835a7bd91406
-
SSDEEP
6144:UvUmkoDf5LmNILmjxwi1njBfzBqv+/8f2WDq+7:HoDRL6iKxnjBG+4q+7
Malware Config
Signatures
Files
-
a16a0d054c7ccac7036a989d55b396ad72c0157f8764347112d5abb9299fd552.exe windows x86
d38b35e594b3d2850a44a09996f2ff20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetVersionExA
EnumSystemGeoID
AreFileApisANSI
DeleteCriticalSection
WriteConsoleA
VirtualAlloc
FlushViewOfFile
ReleaseMutex
GetModuleFileNameA
advapi32
CredWriteDomainCredentialsA
opengl32
glRasterPos3f
secur32
TranslateNameA
TranslateNameW
user32
ChildWindowFromPointEx
GetWindowTextLengthA
ChildWindowFromPoint
GetClassInfoExA
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ