Static task
static1
Behavioral task
behavioral1
Sample
82e16c1ede9c56aeaa0e51b073dda0a0a78922dd19f9cc88b1156f3f03cfb00b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82e16c1ede9c56aeaa0e51b073dda0a0a78922dd19f9cc88b1156f3f03cfb00b.exe
Resource
win10v2004-20220812-en
General
-
Target
82e16c1ede9c56aeaa0e51b073dda0a0a78922dd19f9cc88b1156f3f03cfb00b
-
Size
335KB
-
MD5
7484b36dee5a12cf9891bf1c26bf1dae
-
SHA1
1b92fa65f37da227e1db63b6e8f9bf555f3b22e2
-
SHA256
82e16c1ede9c56aeaa0e51b073dda0a0a78922dd19f9cc88b1156f3f03cfb00b
-
SHA512
b5b948816d8364cd67fa1e48a85fc2c28e5ad53acbf10a8924bc335194dc4034e2dbbd7681334ffeed163c37c8e231c39c4ec0f87ad3f7636e7e6618c9a97a55
-
SSDEEP
6144:s5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGahj:NPVCI0rIoUpP/5rKFrV3aHGu1a/ES
Malware Config
Signatures
Files
-
82e16c1ede9c56aeaa0e51b073dda0a0a78922dd19f9cc88b1156f3f03cfb00b.exe windows x86
fbef412812126113db3a22f1403d74a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetComputerNameA
ResumeThread
GetTickCount
SetLastError
GetModuleHandleA
GetDiskFreeSpaceW
lstrcmpiW
CloseHandle
CreateFileA
GetCommandLineW
GetFileAttributesW
SetEvent
ReleaseMutex
LocalFree
LoadLibraryW
HeapCreate
CreateThread
FindAtomW
GetSystemTime
user32
DestroyCaret
CloseWindow
GetClipCursor
SetFocus
DrawStateA
FillRect
GetClassInfoA
GetKeyState
CallWindowProcA
GetDlgItem
GetComboBoxInfo
DispatchMessageA
CreateWindowExA
MessageBoxA
cryptdlg
CertConfigureTrustA
CertTrustInit
CertTrustFinalPolicy
CertTrustCertPolicy
DecodeRecipientID
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ