Static task
static1
Behavioral task
behavioral1
Sample
82a7b4039fc80e3f9694ccd09a5ecf2b1ee73f65a7adea81808e62c0855c9cb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82a7b4039fc80e3f9694ccd09a5ecf2b1ee73f65a7adea81808e62c0855c9cb6.exe
Resource
win10v2004-20220812-en
General
-
Target
82a7b4039fc80e3f9694ccd09a5ecf2b1ee73f65a7adea81808e62c0855c9cb6
-
Size
60KB
-
MD5
337062a88a11f0c41e5dcf79289285c4
-
SHA1
06f0a4cab9134298ab5517583a1b7670715b5834
-
SHA256
82a7b4039fc80e3f9694ccd09a5ecf2b1ee73f65a7adea81808e62c0855c9cb6
-
SHA512
b3f08dcbccce1184cfbb5089e9a1e528189f9a387dc4f6fc7b63d1c819fb4e1e89f7535721e59475fbf4f85d441070c4bedc276cc6f4b0c28838ce53daeea8d0
-
SSDEEP
768:zwprLcYkdcC/DVMXdZutOldPQVXa1amOCYDn2CMM/OlTqKaYbZjvHZgdO/C3t1qX:z6BduD2CMYOlP/GY6koIHr
Malware Config
Signatures
Files
-
82a7b4039fc80e3f9694ccd09a5ecf2b1ee73f65a7adea81808e62c0855c9cb6.exe windows x86
416fbd368d0d3acfb5277af9784aafc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
sprintf
malloc
free
modf
memmove
_CIfmod
_CIpow
strncmp
_ftol
atoi
??3@YAXPAX@Z
strncpy
_strnicmp
user32
TranslateMessage
DispatchMessageA
wsprintfA
GetMessageA
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
EnumWindows
PeekMessageA
MessageBoxA
kernel32
GetProcessTimes
GetProcessHeap
WriteProcessMemory
ReadProcessMemory
VirtualQueryEx
CreateThread
Process32Next
Process32First
CreateToolhelp32Snapshot
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
OpenProcess
LCMapStringA
GetStartupInfoA
WaitForSingleObject
Sleep
GetCurrentDirectoryA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
CreateProcessA
GetModuleHandleA
shlwapi
PathFileExistsA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE