Static task
static1
Behavioral task
behavioral1
Sample
82e99c6b63b47baa96c4742340313a37931a8400304c35500a8b6663e6b591c0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82e99c6b63b47baa96c4742340313a37931a8400304c35500a8b6663e6b591c0.exe
Resource
win10v2004-20220901-en
General
-
Target
82e99c6b63b47baa96c4742340313a37931a8400304c35500a8b6663e6b591c0
-
Size
96KB
-
MD5
b61345c80c1901f1872351b7cba1e77a
-
SHA1
7980cb86df3c4c27e84d4445afbb4ccda6d9c0f9
-
SHA256
82e99c6b63b47baa96c4742340313a37931a8400304c35500a8b6663e6b591c0
-
SHA512
20a69694180887f49bea811ae29fb040d82515b0c918cb7c7c8779c0099836f1544ed7ec9ca8b378f0b856669bc6f4d1e0ea21bc4b3edb33cfb2c7448fdadfc1
-
SSDEEP
1536:ss/3uPAgn68yKpFIRp6LiLdAST6mIffQ5DIxuMlWc8BdjM9Ewbe:7iAgn6lKpis3Q6mCrxuMlWRqbe
Malware Config
Signatures
Files
-
82e99c6b63b47baa96c4742340313a37931a8400304c35500a8b6663e6b591c0.exe windows x86
f708ea06431edec62697f89e8da13cba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcpyA
lstrlenA
MultiByteToWideChar
lstrcpynA
InterlockedDecrement
GetProcAddress
LoadLibraryA
LocalFree
GetOEMCP
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
LCMapStringW
GetLastError
WideCharToMultiByte
LCMapStringA
HeapSize
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
ExitProcess
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
user32
UpdateWindow
DefWindowProcA
GetMessageA
DispatchMessageA
DestroyWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
TranslateMessage
PostQuitMessage
SetTimer
BeginPaint
EndPaint
ole32
CoInitializeEx
CoUninitialize
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
oleaut32
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysAllocString
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ