Static task
static1
Behavioral task
behavioral1
Sample
83b602ed8e69e979fc9557f482a4a4c6c9a97b4ad67b879aedeacd2b09e5b20b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83b602ed8e69e979fc9557f482a4a4c6c9a97b4ad67b879aedeacd2b09e5b20b.exe
Resource
win10v2004-20221111-en
General
-
Target
83b602ed8e69e979fc9557f482a4a4c6c9a97b4ad67b879aedeacd2b09e5b20b
-
Size
15KB
-
MD5
df46eef3aef83b226e309dede91a57f2
-
SHA1
fa3c0f07035d814b11f1d461f695d31f8f1568a3
-
SHA256
83b602ed8e69e979fc9557f482a4a4c6c9a97b4ad67b879aedeacd2b09e5b20b
-
SHA512
bf962e0850035cd7060fe9b9908496ae81c1c60d9c52c19d243dfe80d61d9ebd65ce71317ecfbd2fd591093df6cb99f463c326e7680868ca526ecfc7ae1a65df
-
SSDEEP
384:YatLpMnVHhbRzHSHxlMWGuARGO0WcdrWO:/SVH9RLSRlMWDARzq7
Malware Config
Signatures
Files
-
83b602ed8e69e979fc9557f482a4a4c6c9a97b4ad67b879aedeacd2b09e5b20b.exe windows x86
30333ef5a2dd21199d66d4427807be6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
time
_tzset
fclose
_fsopen
_makepath
_splitpath
_strnicmp
_stricmp
calloc
free
fread
ftell
fseek
fwrite
vprintf
wcscmp
fprintf
puts
printf
strncpy
sprintf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
__p__iob
_chsize
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ