Static task
static1
Behavioral task
behavioral1
Sample
82c693a3d0f9871a8158084c071fe98439c99dcf25374eba1b68f3ad57174402.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82c693a3d0f9871a8158084c071fe98439c99dcf25374eba1b68f3ad57174402.exe
Resource
win10v2004-20220812-en
General
-
Target
82c693a3d0f9871a8158084c071fe98439c99dcf25374eba1b68f3ad57174402
-
Size
165KB
-
MD5
b411427c8054cc2cbbd3493b1564c57a
-
SHA1
d5970f6d602bec1eebb815ca1710c86ae4dc26eb
-
SHA256
82c693a3d0f9871a8158084c071fe98439c99dcf25374eba1b68f3ad57174402
-
SHA512
926c53b5e0ab56a37bc5329f5cf24b588dc5fbb39fb44869c1f26ac33e9918e5095aead0b3628d5f3f232598b8d0f8b59ee81b15cbb0bb749616f17af42b3467
-
SSDEEP
3072:eqkoC5TNvZrUnCriPcdRWHsTmt3fG2p+GQGvoy0JN75PyQQgvZy:eqZ6TNZrCJPcd4HsTPh75aF
Malware Config
Signatures
Files
-
82c693a3d0f9871a8158084c071fe98439c99dcf25374eba1b68f3ad57174402.exe windows x86
634436c324ad8ea91930c51080415bd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetAtomNameA
GlobalSize
LoadResource
MultiByteToWideChar
WritePrivateProfileStringW
GetVersionExW
GetModuleHandleW
FindClose
lstrlenW
DeleteCriticalSection
FindFirstFileW
EnumResourceTypesW
LockResource
GetTickCount
MulDiv
GetPrivateProfileIntW
GetVersionExA
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
InitializeCriticalSection
Sleep
GetPrivateProfileStringW
GetLocaleInfoW
newdev
UpdateDriverForPlugAndPlayDevicesW
oleacc
LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ