Static task
static1
Behavioral task
behavioral1
Sample
83cb6cf502af55ea38ce63c74125558ccf008689f9d4f06151e8ca6aec21a1d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
83cb6cf502af55ea38ce63c74125558ccf008689f9d4f06151e8ca6aec21a1d4.exe
Resource
win10v2004-20220812-en
General
-
Target
83cb6cf502af55ea38ce63c74125558ccf008689f9d4f06151e8ca6aec21a1d4
-
Size
276KB
-
MD5
a10eb49c106ec3bfffc70378ebbdf590
-
SHA1
0e02534f7c0a817da35a0d0272c774b5d9001e9f
-
SHA256
83cb6cf502af55ea38ce63c74125558ccf008689f9d4f06151e8ca6aec21a1d4
-
SHA512
77def65c53611bf6343e8fc7c822438c2de4b531f7b3b0346d505cf20c072c751f4b2797fff6d4d28ab404cce9c80174c339a170a3e77f768254e69cb0dfeda5
-
SSDEEP
6144:kuwsqczcpWs9ew7o8EzfWeHqbCppA4X/xkg09Isp1:ktscpB9ebzlHqjGKgWb1
Malware Config
Signatures
Files
-
83cb6cf502af55ea38ce63c74125558ccf008689f9d4f06151e8ca6aec21a1d4.exe windows x86
8f87faae85f579969028402491a77d99
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetCurrentProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
GlobalFindAtomA
MultiByteToWideChar
LoadLibraryA
FindResourceW
HeapCreate
lstrcmpA
SetLastError
GetSystemTimeAsFileTime
WideCharToMultiByte
GetLocalTime
GetProcessHeap
HeapFree
HeapAlloc
lstrcpyW
GetOEMCP
lstrlenW
SystemTimeToFileTime
CloseHandle
GetLocaleInfoW
GetCurrentProcessId
CreateFileA
GetUserDefaultLCID
user32
DefDlgProcA
DdeSetQualityOfService
DlgDirListComboBoxW
DdeUnaccessData
DdeQueryStringA
DdeUninitialize
DdeReconnect
DisplayExitWindowsWarnings
DlgDirListComboBoxA
DdeQueryStringW
DlgDirListW
DisableProcessWindowsGhosting
DispatchMessageW
DdeSetUserHandle
DispatchMessageA
DlgDirListA
fmifs
DiskCopy
Format
FormatEx
ComputeFmMediaType
EnableVolumeCompression
Chkdsk
Extend
Sections
.text Size: 270KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ