Static task
static1
Behavioral task
behavioral1
Sample
82706ef3aafb4439c00d966959f256c7b13a5785d02ae8acfb8e75f58392ef7a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82706ef3aafb4439c00d966959f256c7b13a5785d02ae8acfb8e75f58392ef7a.exe
Resource
win10v2004-20221111-en
General
-
Target
82706ef3aafb4439c00d966959f256c7b13a5785d02ae8acfb8e75f58392ef7a
-
Size
196KB
-
MD5
db1682c6fa93d176247b9143843aebc3
-
SHA1
36076a7000f28dad3e4d9d651ed7397bf20e7e4c
-
SHA256
82706ef3aafb4439c00d966959f256c7b13a5785d02ae8acfb8e75f58392ef7a
-
SHA512
e270cfda41e3e574ff6e6536d162581a1a00c9b15751597627a5b1ff409a22392b6aedc2c7ae588b20c48f70e84f3a350fa7ef9652319c0f6c429faa4112b47d
-
SSDEEP
3072:8bYHQ2GgSDuxPYgQp2Xi4wAWwLVaCfEl7pidfPxfD2GnQfuYu6dhIPR:8bYHQ2GQQp6i4ZvfEUfpnQfbdhI5
Malware Config
Signatures
Files
-
82706ef3aafb4439c00d966959f256c7b13a5785d02ae8acfb8e75f58392ef7a.exe windows x86
2466d687d660513c4f8795145709fc85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
CopyFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindResourceA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SetUnhandledExceptionFilter
SizeofResource
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fclose
fopen
fread
free
fseek
ftell
fwrite
getenv
malloc
rewind
signal
strcat
strtok
vfprintf
shell32
SHGetFolderPathA
ShellExecuteA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ