Static task
static1
Behavioral task
behavioral1
Sample
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89.exe
Resource
win10v2004-20220812-en
General
-
Target
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89
-
Size
120KB
-
MD5
71217890d9021fa9c36ea99cffc63f5d
-
SHA1
d9a4fa18bbf4651c6283ce6e9890f1e90efcbfbc
-
SHA256
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89
-
SHA512
691b2e586a205834dca12575f8948f42eada09d50ca929efe89bb5cee55c4d7161b4139415e122218eb17a8507caba3c7cb0197ad8ba7e70b7173876ee849d35
-
SSDEEP
3072:rhXKsE/hYv4Bi6wS1ciXK98SrGHC5lpupnD3vKZ+x:laB6+1aCSl0pnryu
Malware Config
Signatures
Files
-
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89.exe windows x86
be9ebcf02911770b45e77b6617c0df5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryW
PulseEvent
ReadConsoleA
FindAtomW
HeapFree
GetDriveTypeA
GetVolumePathNameW
VirtualProtect
CloseHandle
TlsGetValue
GetStringTypeW
GetLogicalDrives
GetStartupInfoA
DeleteFileW
ReadConsoleA
Sleep
ReadConsoleA
GetLastError
GetPrivateProfileSectionA
lstrlenA
ReleaseMutex
clbcatq
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
SetupOpen
DllGetClassObject
CheckMemoryGates
SetupOpen
CheckMemoryGates
gpedit
DllCanUnloadNow
ExportRSoPData
DllGetClassObject
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE