Static task
static1
Behavioral task
behavioral1
Sample
83fa7bea10dff31c985cdc15bf532fbaabbc8a8b358a019db25a7eeffebba10a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
83fa7bea10dff31c985cdc15bf532fbaabbc8a8b358a019db25a7eeffebba10a.exe
Resource
win10v2004-20221111-en
General
-
Target
83fa7bea10dff31c985cdc15bf532fbaabbc8a8b358a019db25a7eeffebba10a
-
Size
3.5MB
-
MD5
24d1d9612f0e0e3edc59211a06b56d2c
-
SHA1
c28c16db647384b2a48a73e25a36a939f05bd37a
-
SHA256
83fa7bea10dff31c985cdc15bf532fbaabbc8a8b358a019db25a7eeffebba10a
-
SHA512
50c3b15011fe0763927fcbe597cc7eaf07813f5b97fbd7a4b590fab2bf6884a103e3480ad167b65881e59651705ab6e202771e73d86c6024c76d4df75144ba83
-
SSDEEP
98304:BO/V8Ke84ZTOr56fUSefAxtUR18Bfu9AU7F/a6oyjZQhaursFmaW9MD6uY++y0Gt:BKVve/crMfUr8BYMyK+t
Malware Config
Signatures
Files
-
83fa7bea10dff31c985cdc15bf532fbaabbc8a8b358a019db25a7eeffebba10a.exe windows x86
d1f9cd3dcacf2d400394faa92fdb03ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount64
GetProcessHeap
ExitThread
AddVectoredExceptionHandler
HeapAlloc
HeapFree
DeleteCriticalSection
GetLastError
CreateMutexA
Wow64DisableWow64FsRedirection
Sleep
GetModuleHandleExW
ExitProcess
InterlockedCompareExchange
SetLastError
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
SystemTimeToFileTime
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetFileAttributesA
DisableThreadLibraryCalls
GetTempPathA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
ResumeThread
CloseHandle
IsWow64Process
GetTickCount
GetCurrentThreadId
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
advapi32
RegEnumKeyW
RegOpenKeyA
RegQueryInfoKeyW
RegCreateKeyW
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyW
user32
DispatchMessageW
AppendMenuW
PostMessageW
FindWindowA
DestroyWindow
GetClientRect
PeekMessageA
DispatchMessageA
CreatePopupMenu
MessageBoxW
GetWindowRect
SetForegroundWindow
LoadIconW
LoadIconA
RegisterClassExA
CheckMenuItem
UpdateWindow
MsgWaitForMultipleObjects
GetWindowTextA
RedrawWindow
TrackPopupMenu
SendMessageA
RegisterClassExW
GetWindowTextW
RegisterWindowMessageA
BringWindowToTop
AppendMenuA
SendMessageW
PostQuitMessage
GetSystemMetrics
FindWindowW
SetWindowPos
PostMessageA
RegisterWindowMessageW
Sections
.text Size: 571KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ