Static task
static1
Behavioral task
behavioral1
Sample
82af7df1656bb60df7970cf332a93673e5e46b143f665d3083611b9372cec7d8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82af7df1656bb60df7970cf332a93673e5e46b143f665d3083611b9372cec7d8.exe
Resource
win10v2004-20221111-en
General
-
Target
82af7df1656bb60df7970cf332a93673e5e46b143f665d3083611b9372cec7d8
-
Size
424KB
-
MD5
3a0ba5460d6615e10a5ff68d73bffa80
-
SHA1
37da7225d3e4fd0aed15e02ee66cf029d4950a18
-
SHA256
82af7df1656bb60df7970cf332a93673e5e46b143f665d3083611b9372cec7d8
-
SHA512
3108e337c75e490c4eb9dda2fdc070e0ac94381f5e1ed4eb8998f23cd1dc1da77a49074eab2f4962a6e4a499d6814b0f73b73733b6737ad51acb4494a8d6974e
-
SSDEEP
12288:NPqnmHrqQWSASD/3mcVt3IAQP15+b5qxiBX:NPuA1/dVOb+NqU5
Malware Config
Signatures
Files
-
82af7df1656bb60df7970cf332a93673e5e46b143f665d3083611b9372cec7d8.exe windows x86
09aebd5670a675730a972bb749a3c042
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptDestroyHash
CryptHashData
GetUserNameW
RegEnumKeyExA
kernel32
InitializeCriticalSection
shlwapi
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfA
user32
CloseWindowStation
DispatchMessageA
EndDialog
FindWindowExA
GetCursorPos
GetDlgItemTextA
GetIconInfo
GetMessageA
GetWindowTextA
OpenWindowStationA
PeekMessageA
Sections
.tovyb Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ixwn Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xeh Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ