Static task
static1
Behavioral task
behavioral1
Sample
82d607930ac1db4829c4eb4bb1df47cf9892e48ad527b1365e0406e1f08a8112.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82d607930ac1db4829c4eb4bb1df47cf9892e48ad527b1365e0406e1f08a8112.exe
Resource
win10v2004-20221111-en
General
-
Target
82d607930ac1db4829c4eb4bb1df47cf9892e48ad527b1365e0406e1f08a8112
-
Size
795KB
-
MD5
de8b09d43c7540c83a4d949f15e71f1b
-
SHA1
71e205211de8dbf1c5ff6209c0c041e16eb58271
-
SHA256
82d607930ac1db4829c4eb4bb1df47cf9892e48ad527b1365e0406e1f08a8112
-
SHA512
7ef54fce1f025a2fea7c70bedabc3996da799ae4c0ab378ea9191ec42aba7e151b7d7151be5c0def5220d69f68c8cc62c3f345a0d4d0bd10d07780dd1a8c3b25
-
SSDEEP
24576:IrHu7Nmfc0yevo0LQ1zbz9AQVCptcU6Be2g:Ouxgc4Nsdz9AQccU6Bel
Malware Config
Signatures
Files
-
82d607930ac1db4829c4eb4bb1df47cf9892e48ad527b1365e0406e1f08a8112.exe windows x86
2e31e3c31e0a68a279020e42d631be06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
InterlockedExchange
GetProcAddress
LeaveCriticalSection
TlsGetValue
FreeLibrary
FlushFileBuffers
GetFullPathNameA
VirtualProtect
InitializeCriticalSection
DeleteCriticalSection
GetThreadLocale
EnterCriticalSection
ExitProcess
MultiByteToWideChar
GetSystemTimeAsFileTime
WriteFile
SetFilePointer
GetTempPathA
HeapAlloc
GlobalAlloc
HeapCreate
WideCharToMultiByte
LoadLibraryA
IsDBCSLeadByteEx
GetModuleHandleA
GetFileSize
SetUnhandledExceptionFilter
VirtualQuery
Sleep
user32
CharLowerBuffA
secur32
QuerySecurityPackageInfoA
wldap32
ord46
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xyue Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ