Static task
static1
Behavioral task
behavioral1
Sample
82b83b7e1009ce24d79eca86a0f7e4b904172011fff91e52053b002213a8ec5f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
82b83b7e1009ce24d79eca86a0f7e4b904172011fff91e52053b002213a8ec5f.exe
Resource
win10v2004-20220901-en
General
-
Target
82b83b7e1009ce24d79eca86a0f7e4b904172011fff91e52053b002213a8ec5f
-
Size
492KB
-
MD5
0fe55707d9b280c6f2b408801072ea21
-
SHA1
4f8e266d70454f15e356c2955b9d271dcbd09129
-
SHA256
82b83b7e1009ce24d79eca86a0f7e4b904172011fff91e52053b002213a8ec5f
-
SHA512
0d354bcd13c5892be9167da3444ca848a0a7a69a8b2283fb73728412860b95ddc961097d940fbc9ec2544c6c4ef2bcb22944c6bb70a11aef3d50871dd6be7173
-
SSDEEP
6144:YrbKm2PEkEvAzwdpFmdJazNImb00NUy/CaccI29guJzaMCcUgXr/+:YHvvN7Fsyb0M3/Scy64PgXL+
Malware Config
Signatures
Files
-
82b83b7e1009ce24d79eca86a0f7e4b904172011fff91e52053b002213a8ec5f.exe windows x86
c7b3e7ab930e2743ba52bca1c2e14a49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessTimes
FindClose
GetPrivateProfileStringW
GetFileAttributesA
GetPriorityClass
ReadFile
LocalFree
GetCurrentProcessId
EnumCalendarInfoW
SetLastError
EnterCriticalSection
HeapCreate
GetModuleFileNameA
GlobalFree
GetDriveTypeW
CreateMailslotA
GetModuleHandleA
SuspendThread
GetCurrentThreadId
FindAtomA
user32
GetKeyboardType
GetWindowLongA
CallWindowProcW
GetKeyState
SetFocus
GetWindowInfo
GetClientRect
GetClassInfoA
DispatchMessageA
GetSysColor
DrawTextW
DispatchMessageA
IsWindow
colbact
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
desk.cpl
DeskSetCurrentScheme
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 482KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ