Static task
static1
Behavioral task
behavioral1
Sample
82d85415c78b997d2ab6a3d2f16154fa246ab79de33216d8a58ec7627d2129fe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
82d85415c78b997d2ab6a3d2f16154fa246ab79de33216d8a58ec7627d2129fe.exe
Resource
win10v2004-20221111-en
General
-
Target
82d85415c78b997d2ab6a3d2f16154fa246ab79de33216d8a58ec7627d2129fe
-
Size
391KB
-
MD5
354e5656add5108546805c9d11fc86a7
-
SHA1
302597f7ba2a0f4e138173dfc4941a6b3d07cd6c
-
SHA256
82d85415c78b997d2ab6a3d2f16154fa246ab79de33216d8a58ec7627d2129fe
-
SHA512
cf4f32a77059ac4d84f7d1b6f73fa256990f9e43a87b35f86f075b9cd6b35ae094f219623cd3960d7a5d39622b12980d01e51526d1e5ae69ce58e913da5bdd52
-
SSDEEP
12288:MgRMsHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:MgRMskAJLjpFvN/ytkjEOfoMWN
Malware Config
Signatures
Files
-
82d85415c78b997d2ab6a3d2f16154fa246ab79de33216d8a58ec7627d2129fe.exe windows x86
8d9da0bcb61543890db27cad753a254a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
TlsGetValue
InitializeCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
IsBadStringPtrW
CreateEventW
WriteFile
CloseHandle
LocalFree
LoadLibraryW
GetFileTime
HeapCreate
ReleaseMutex
GetPrivateProfileStringA
GlobalFlags
FindClose
lstrlenW
ReleaseMutex
user32
DrawTextA
GetClassInfoA
EndDialog
GetClientRect
DispatchMessageA
GetSysColor
DrawStateW
IsWindow
CreateWindowExA
GetKeyboardType
GetSysColor
SetFocus
CallWindowProcW
qcliprov
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ