Static task
static1
Behavioral task
behavioral1
Sample
82edc798483abe13e0e51de149e22472fd8b28025e37f5264fa6644e12e69fed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82edc798483abe13e0e51de149e22472fd8b28025e37f5264fa6644e12e69fed.exe
Resource
win10v2004-20220901-en
General
-
Target
82edc798483abe13e0e51de149e22472fd8b28025e37f5264fa6644e12e69fed
-
Size
358KB
-
MD5
e3f0e8e0ad48f47fa4d7d5750cc5e751
-
SHA1
c95f5dfae2eea2a9f1b13c5f0fece20cba4b5363
-
SHA256
82edc798483abe13e0e51de149e22472fd8b28025e37f5264fa6644e12e69fed
-
SHA512
907b0046eb61dda3a057634cc725f37580bbb6008ae0f17ecee263c86f1b4f82b085d1f15d4b03fd398d41fc4f5e635262dce4673de36d455dbe765fb2c53a7d
-
SSDEEP
6144:BFribn2ziJonY7JFI1kZuoi7Scuw483B/ZstcBJblY0ro4XrazeRtp/5f3WPxDYd:BFrc26oY7IKZuUw/B/6tsz304b1Hp/ZO
Malware Config
Signatures
Files
-
82edc798483abe13e0e51de149e22472fd8b28025e37f5264fa6644e12e69fed.exe windows x86
5ae75bf13330d493f2bd1bbc9baac918
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetConsoleDisplayMode
ResumeThread
GlobalUnlock
GetCommandLineA
WaitForSingleObject
SetLastError
WaitForMultipleObjects
HeapReAlloc
VirtualProtect
GetVersion
GetTickCount
InterlockedExchange
lstrlenA
GetAtomNameA
LoadLibraryExA
GetModuleHandleA
GetUserDefaultLangID
GetConsoleCP
GlobalSize
HeapCreate
user32
SetForegroundWindow
GetDC
GetClassNameA
GetParent
GetFocus
DragDetect
GetCursorPos
ReleaseDC
EndPaint
FrameRect
ShowWindow
FillRect
BeginPaint
GetWindow
AnyPopup
CreateIcon
DrawTextA
wsprintfA
GetTitleBarInfo
rastapi
DeviceListen
AddPorts
DeviceDone
DeviceConnect
PortClose
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ