Static task
static1
Behavioral task
behavioral1
Sample
82b1ef63648817f5ec03c4a38a9f1386c2f3cbcb106a5abee05b3cfa093d22fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82b1ef63648817f5ec03c4a38a9f1386c2f3cbcb106a5abee05b3cfa093d22fd.exe
Resource
win10v2004-20221111-en
General
-
Target
82b1ef63648817f5ec03c4a38a9f1386c2f3cbcb106a5abee05b3cfa093d22fd
-
Size
304KB
-
MD5
e92317c4e12c2970355680b247fd0c62
-
SHA1
168eadc8046f65a7a464c1ae53b8b532286a50a0
-
SHA256
82b1ef63648817f5ec03c4a38a9f1386c2f3cbcb106a5abee05b3cfa093d22fd
-
SHA512
2b24100b3e444f28f9ba31a1170862590e9b65d260e8dc13407371c31426bee05d88e75cb3ba3ed2d1f449a301d3580a6ff9b042d969ae8d84570d740ef7007d
-
SSDEEP
6144:395mgHt+pdjKGS748YxmDiloaFoZRatXdCyKx8iK:3vmAw/W7TYxm3a2exPKtK
Malware Config
Signatures
Files
-
82b1ef63648817f5ec03c4a38a9f1386c2f3cbcb106a5abee05b3cfa093d22fd.exe windows x86
ffef51e970b620491701b91cc19e1ca1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPriorityClass
GetModuleHandleW
GetTickCount
IsDebuggerPresent
ResetEvent
GetComputerNameA
ExitProcess
CreateFileMappingA
GetSystemTime
MapViewOfFile
FindAtomA
VirtualAlloc
CloseHandle
GetPrivateProfileIntA
HeapDestroy
GetFileAttributesW
lstrlenW
FindClose
GlobalFree
LoadLibraryW
user32
CallWindowProcA
GetDlgItem
CloseWindow
GetCaretPos
FillRect
DrawStateA
GetClientRect
GetClassInfoA
DestroyCaret
CreateWindowExA
DispatchMessageA
EndDialog
GetMenu
ntshrui
IsPathSharedA
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsFolderPrivateForUser
IsPathSharedW
dpnet
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ