Static task
static1
Behavioral task
behavioral1
Sample
82ad5054672a46994a589b22b7be8949bc5dc60b6fe6d724e9d1952eba862fc7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82ad5054672a46994a589b22b7be8949bc5dc60b6fe6d724e9d1952eba862fc7.exe
Resource
win10v2004-20221111-en
General
-
Target
82ad5054672a46994a589b22b7be8949bc5dc60b6fe6d724e9d1952eba862fc7
-
Size
327KB
-
MD5
f8c026ea0515913c3a4d27b022368bbf
-
SHA1
98423dff54f2659bb5dbd27508e7bc5bb26732a3
-
SHA256
82ad5054672a46994a589b22b7be8949bc5dc60b6fe6d724e9d1952eba862fc7
-
SHA512
c42ca015250dc7dc6b69098584271c1e30c80f53c6b34111afd0901a4e6c00cc5db54219b2306e07f349261520973787dc3b48927c021cdb4b73c98094f07fab
-
SSDEEP
6144:AEnQCzPAsxwuJBLHwU4aLi5BICDqihekOAkiuSS8AUrqtxxP7mkybRO3+dz:AE3Dn3LHwU4Ei5BICDbeO1uX8Acumjbx
Malware Config
Signatures
Files
-
82ad5054672a46994a589b22b7be8949bc5dc60b6fe6d724e9d1952eba862fc7.exe windows x86
2b1d8b82c9400700436fafa5a05bbfd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
SetLastError
GetLastError
LoadLibraryExW
GetDateFormatA
IsBadReadPtr
EnumResourceTypesW
CancelIo
FreeConsole
IsBadStringPtrA
CloseHandle
TlsGetValue
VirtualProtect
LocalFree
DeleteCriticalSection
FindClose
GetDiskFreeSpaceExA
GetDriveTypeW
GetModuleHandleA
ResetEvent
advapi32
OpenEventLogA
GetFileSecurityA
RegLoadKeyA
RegCloseKey
FreeSid
RegCreateKeyExA
CloseTrace
IsTokenUntrusted
LsaFreeMemory
CloseEventLog
LsaClose
AccessCheck
LsaSetSecret
RegCloseKey
glmf32
glsBlock
glsGetError
glsCharubz
glsBinary
glsChannel
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ