Static task
static1
Behavioral task
behavioral1
Sample
82c0f0e958b5e224e7e5854ff63a9cd29ee9d26f8115e737c2c79dab2afa3373.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82c0f0e958b5e224e7e5854ff63a9cd29ee9d26f8115e737c2c79dab2afa3373.exe
Resource
win10v2004-20220812-en
General
-
Target
82c0f0e958b5e224e7e5854ff63a9cd29ee9d26f8115e737c2c79dab2afa3373
-
Size
58KB
-
MD5
9b2690fe2cb5378955f9e71a21dd38ee
-
SHA1
0da2611ddc26ad06b7dbfcb941b07fe752c85594
-
SHA256
82c0f0e958b5e224e7e5854ff63a9cd29ee9d26f8115e737c2c79dab2afa3373
-
SHA512
20cb21e33575d246cf02a9fc91959147d2438b2c29b3e75521460fed52fa211479a651078c6cc0cd3b90dcd4b4b1afea5eeb6ff9db734646c829c01f8b6185be
-
SSDEEP
1536:fgRvb2i8yy2JcbmyiSXTSxhMHhLaRQ8XsKZD:fgRvdJJciyDXuxhMBLP88
Malware Config
Signatures
Files
-
82c0f0e958b5e224e7e5854ff63a9cd29ee9d26f8115e737c2c79dab2afa3373.exe windows x86
3ada25d5c5548a2090f31cfd07e9937f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeW
GetModuleHandleA
SetLastError
Sleep
GetDriveTypeW
DeleteFileA
lstrlenA
GetVolumePathNameW
lstrcmpiA
lstrcmpiA
lstrcmpiA
IsValidLocale
HeapCreate
lstrcmpiA
GetStdHandle
lstrcmpiA
FileTimeToLocalFileTime
OpenMutexA
WaitForMultipleObjects
GetLogicalDriveStringsW
GetProcessHeap
GetModuleFileNameA
CreateMailslotA
scecli
DeltaNotify
InitializeChangeNotify
SceSysPrep
SceOpenPolicy
Sections
.text Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ