Static task
static1
Behavioral task
behavioral1
Sample
83c327e0550066759fef1d1d6ceed32eba86783c7e7e187b30ecc85d0cb77467.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
83c327e0550066759fef1d1d6ceed32eba86783c7e7e187b30ecc85d0cb77467.exe
Resource
win10v2004-20220812-en
General
-
Target
83c327e0550066759fef1d1d6ceed32eba86783c7e7e187b30ecc85d0cb77467
-
Size
851KB
-
MD5
894ca32e62568ffc3b7e645333aaf0ad
-
SHA1
25d9ba051029e4ae272dba1aa839fcb37b44f240
-
SHA256
83c327e0550066759fef1d1d6ceed32eba86783c7e7e187b30ecc85d0cb77467
-
SHA512
5eb2d36bf6d7a29ce4cf5f54387206b4d0d9dabb7910a9a2d4c306fb410b5c54bf15eb901fa16ce49cfd43d557a278853cbd28882a9e4f5c6b00470fd9f9c72c
-
SSDEEP
24576:Rnhts+6Oy0HmxTfir7gWnhAF5Bj71aA1Wdd4SaXj:9nNQluODBj7Tsdd4vj
Malware Config
Signatures
Files
-
83c327e0550066759fef1d1d6ceed32eba86783c7e7e187b30ecc85d0cb77467.exe windows x86
64be2710da3722d05af850cb032d4d97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
GetTickCount
lstrlenA
GetFileAttributesA
DeleteFileA
SetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindFirstFileA
lstrcmpA
MoveFileExA
WritePrivateProfileStringA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetShortPathNameA
GetVersionExA
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcpyA
GlobalAlloc
GlobalFree
FreeLibrary
GetProcAddress
CreateMutexA
CloseHandle
CreateDirectoryA
RemoveDirectoryA
GetProcessHeap
HeapFree
GetTempFileNameA
GetWindowsDirectoryA
GetTempPathA
HeapAlloc
GetDiskFreeSpaceA
GetCurrentDirectoryA
MoveFileA
GetVolumeInformationA
GetModuleHandleA
CompareFileTime
GetLocalTime
lstrcatA
GetFileInformationByHandle
CreateFileA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetSystemDirectoryA
CreateProcessA
GetCurrentProcessId
OutputDebugStringA
lstrcpynA
GetLastError
GetDriveTypeA
LoadLibraryA
GetStringTypeW
TlsSetValue
GetCurrentThreadId
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetEndOfFile
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
GetStringTypeA
LCMapStringA
TlsGetValue
SetStdHandle
WideCharToMultiByte
SetLastError
GetFullPathNameA
TlsAlloc
GetStdHandle
RtlUnwind
SetHandleCount
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
VirtualAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetSystemTime
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
CreateThread
MultiByteToWideChar
GetStartupInfoA
SetFilePointer
ExitThread
GetFileType
ReadFile
WriteFile
GetEnvironmentVariableA
HeapDestroy
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
user32
FindWindowA
SetForegroundWindow
GetMessageA
MessageBoxA
PostQuitMessage
SetDlgItemTextA
KillTimer
LoadIconA
SetTimer
SetCursor
IsWindow
SendMessageA
GetWindowTextA
EnableWindow
GetDesktopWindow
DialogBoxParamA
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
ShowWindow
GetClientRect
CreateWindowExA
SetWindowTextA
DefWindowProcA
UpdateWindow
LoadCursorA
GetSysColorBrush
RegisterClassA
GetWindowRect
SetFocus
LoadStringA
SystemParametersInfoA
EndDialog
GetDlgItem
gdi32
CreateFontIndirectA
CreateFontA
shell32
ShellExecuteExA
SHBrowseForFolderA
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ