_gifgeek@8
Static task
static1
Behavioral task
behavioral1
Sample
82f34e859b458036d7f847a70b616c244aed28dc6e51c99e6c6ce144857e56c8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82f34e859b458036d7f847a70b616c244aed28dc6e51c99e6c6ce144857e56c8.exe
Resource
win10v2004-20220901-en
General
-
Target
82f34e859b458036d7f847a70b616c244aed28dc6e51c99e6c6ce144857e56c8
-
Size
3.8MB
-
MD5
52242b0f18fda799a91931a570e9ef81
-
SHA1
6cf0427991c4bbf47aee799e6e1b84fcfad3292f
-
SHA256
82f34e859b458036d7f847a70b616c244aed28dc6e51c99e6c6ce144857e56c8
-
SHA512
215a5ddd6c2465ec1b4bf44d7c928d12ff9eca5d5c262376fa38a3a268fe2478e8e484e25593f18fe143e414f750385b2e6ce5823fdb26886c8d1b452015a4f0
-
SSDEEP
98304:Mrq57kIMGwK/DfC/XQuFEQ4xmGR/DOFEBlyHMtw8Uj+31Lc:M4VZJbo9Axmi/D8EBlystO+
Malware Config
Signatures
Files
-
82f34e859b458036d7f847a70b616c244aed28dc6e51c99e6c6ce144857e56c8.exe windows x86
f2473b6e977d09f9aeecb657d8a0e0a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesW
SearchPathW
SetFilePointer
SetLocalTime
BuildCommDCBAndTimeoutsA
LoadResource
SetUnhandledExceptionFilter
InterlockedIncrement
ReadConsoleA
CompareFileTime
SetDefaultCommConfigW
SetEnvironmentVariableW
WaitForSingleObject
CallNamedPipeW
SetTapeParameters
IsBadReadPtr
SetCommState
GetPriorityClass
Sleep
CopyFileW
GetPrivateProfileStructW
SetSystemTimeAdjustment
GetFileAttributesA
FileTimeToDosDateTime
GetACP
lstrlenW
DisconnectNamedPipe
FreeLibraryAndExitThread
GetCurrentDirectoryW
SetLastError
GetProcAddress
SetStdHandle
SetFileApisToOEM
LoadLibraryA
LocalAlloc
WaitForMultipleObjects
_lread
GetModuleHandleA
lstrcatW
FreeEnvironmentStringsW
FindAtomW
GetProfileSectionW
lstrcpyA
CreateSemaphoreA
ExitProcess
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetLastError
DeleteFileA
GetModuleFileNameW
GetStartupInfoW
HeapValidate
RaiseException
RtlUnwind
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
Exports
Exports
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ