Static task
static1
Behavioral task
behavioral1
Sample
deee2087313c3a4c75d724de966f417f9e221e0597f70f4799b11f82dc6af6d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
deee2087313c3a4c75d724de966f417f9e221e0597f70f4799b11f82dc6af6d2.exe
Resource
win10v2004-20220812-en
General
-
Target
deee2087313c3a4c75d724de966f417f9e221e0597f70f4799b11f82dc6af6d2
-
Size
170KB
-
MD5
82a5a0f456dae822ffff849269c2dd67
-
SHA1
4eceea23ec125ba1a6f0fc646a66e125220e4471
-
SHA256
deee2087313c3a4c75d724de966f417f9e221e0597f70f4799b11f82dc6af6d2
-
SHA512
c5830661724866711510a2521db4f0d1eed8b40d89f5bce84b095af8bfbd1b818dc1f10ee9de71b6dea4e01d50e586033122e1f42409287908fe610006c99989
-
SSDEEP
3072:bJ8Kor+d7Nhn24HXeRzd7Z2j0/RBMNe0ouq+gATcAxnq/rnHzHLY80u:blldxh24H+p7PMNzv7rTcwn4rTHLAu
Malware Config
Signatures
Files
-
deee2087313c3a4c75d724de966f417f9e221e0597f70f4799b11f82dc6af6d2.exe windows x86
ea32615ca4d21ba567cd9e37963fccf9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
MulDiv
DeleteCriticalSection
CloseHandle
FlushFileBuffers
lstrcmpiA
GetStartupInfoA
CreateFileA
LoadLibraryA
AddAtomA
lstrcpynA
GetCPInfo
GetLastError
lstrcmpA
GetFullPathNameA
EnterCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
MultiByteToWideChar
lstrlenA
LCMapStringW
IsBadReadPtr
FindFirstFileA
GetThreadLocale
ReadFile
lstrcpyA
GetOEMCP
GetDiskFreeSpaceA
GetStringTypeA
EnumResourceNamesW
VirtualProtect
GetFileAttributesA
GetProcAddress
LCMapStringA
SetFilePointer
GetStringTypeW
GetModuleHandleA
lstrlenW
LeaveCriticalSection
IsBadCodePtr
FreeLibrary
SetStdHandle
InitializeCriticalSection
WriteFile
GetEnvironmentStringsW
Sleep
GetTickCount
GetEnvironmentStrings
FreeEnvironmentStringsA
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentThreadId
lstrcatA
RaiseException
Sections
.text Size: 92KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ