Static task
static1
Behavioral task
behavioral1
Sample
c83ed6742b8e87f4b983ebe7e245460751b4baa6522b9c93920274ea802587e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c83ed6742b8e87f4b983ebe7e245460751b4baa6522b9c93920274ea802587e0.exe
Resource
win10v2004-20221111-en
General
-
Target
c83ed6742b8e87f4b983ebe7e245460751b4baa6522b9c93920274ea802587e0
-
Size
251KB
-
MD5
a2c915812dc0b63307e420d7581345be
-
SHA1
7bd69a3bcf8d49626f1f43212af20220ea15d41d
-
SHA256
c83ed6742b8e87f4b983ebe7e245460751b4baa6522b9c93920274ea802587e0
-
SHA512
71d11d5ea63c5c8b95e20ea5c784a90983c892740c1ea0dca5695c65710c4f544cde2cebc8659b328cf05cdff30b0e3b8f6fa65b2ead54b241f908d2a700a0a0
-
SSDEEP
6144:ia+Q0ev6iRuATrQrYzcLT7fGFueh46j5+:i39evBuNrYzcL3ox
Malware Config
Signatures
Files
-
c83ed6742b8e87f4b983ebe7e245460751b4baa6522b9c93920274ea802587e0.exe windows x86
fe4262c1ed4b519637e6d64f17af6c5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecW
kernel32
GetSystemDefaultLCID
HeapFree
GetProcessHeap
LZCreateFileW
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
GetCommandLineW
SetErrorMode
GetDriveTypeW
GetModuleFileNameW
InterlockedDecrement
LocalFree
OutputDebugStringW
GetSystemTimeAsFileTime
GetStartupInfoA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedCompareExchange
InterlockedExchange
user32
PostQuitMessage
GetMessageW
TranslateMessage
DispatchMessageW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
oleaut32
DispGetIDsOfNames
OleLoadPicture
QueryPathOfRegTypeLib
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen
Sections
.text Size: 163KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 258B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ