Static task
static1
Behavioral task
behavioral1
Sample
83d5a78096af48931d51e93f8dcd2cd68a63485bd466398eb67d420419d1bad1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83d5a78096af48931d51e93f8dcd2cd68a63485bd466398eb67d420419d1bad1.exe
Resource
win10v2004-20220812-en
General
-
Target
83d5a78096af48931d51e93f8dcd2cd68a63485bd466398eb67d420419d1bad1
-
Size
278KB
-
MD5
4b5fb64a1576640930e74cc8368bde80
-
SHA1
338085e0dd78b6bdeb1af06fa52e97a6cffd1f94
-
SHA256
83d5a78096af48931d51e93f8dcd2cd68a63485bd466398eb67d420419d1bad1
-
SHA512
32d3f5793c17bfb76f5bb96a36a2848bcd35555e44bb720ef2cfc7e33b2f05ad2408be89d38a9dd934bc79b763a7d4f59b183c94c3cd099256b6e682cb1d194c
-
SSDEEP
6144:nv6jsXLkz4ZpCEEsEXulYlONCpUjb+OaGy6aG71MoFn:nhXLkz4ZWES6GUjFaq95
Malware Config
Signatures
Files
-
83d5a78096af48931d51e93f8dcd2cd68a63485bd466398eb67d420419d1bad1.exe windows x86
53dac8ad4b8304764bb821221965ac15
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
HeapFree
GetUserDefaultLCID
lstrcpyW
LoadLibraryW
GetSystemTimeAsFileTime
CreateFileA
GetProcessHeap
GlobalAlloc
lstrcmpA
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
lstrlenW
GetTickCount
SetUnhandledExceptionFilter
GlobalFindAtomA
SetLastError
SystemTimeToFileTime
HeapAlloc
GetLocalTime
FindResourceW
psapi
EnumProcessModules
GetProcessImageFileNameA
GetPerformanceInfo
EnumPageFilesA
EnumPageFilesW
EmptyWorkingSet
olecli32
LeSetBounds
LeObjectConvert
LeSetData
LeSaveToStream
LeGetUpdateOptions
LeRelease
LeQueryBounds
LeReconnect
LeQueryOpen
LeQueryOutOfDate
LeObjectLong
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ