Static task
static1
Behavioral task
behavioral1
Sample
83cb4214ecdfcd939fdb6511217060d0bfaeb91de22af9ec60c000aee88d5b7d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83cb4214ecdfcd939fdb6511217060d0bfaeb91de22af9ec60c000aee88d5b7d.exe
Resource
win10v2004-20221111-en
General
-
Target
83cb4214ecdfcd939fdb6511217060d0bfaeb91de22af9ec60c000aee88d5b7d
-
Size
89KB
-
MD5
4c5aae3edbaac5d187e42a15285e343e
-
SHA1
47b3ef92be2908b5cbe0c74bd450f7dabcc95e0d
-
SHA256
83cb4214ecdfcd939fdb6511217060d0bfaeb91de22af9ec60c000aee88d5b7d
-
SHA512
778b2016050bd5304f7972614af13dccd7d753145cc8a66e8da03ff5e5abf9a6da4ba54e09ce18e101a1d9e08a7bd6d92f916d036d746aa79f6cac0e97dd0122
-
SSDEEP
1536:MCRXU8X+BpOZCKlOODKSXtap3gXjLZdOAjCt:RUa+BpOZCKQM+3gTLrQt
Malware Config
Signatures
Files
-
83cb4214ecdfcd939fdb6511217060d0bfaeb91de22af9ec60c000aee88d5b7d.exe windows x86
4e36a0f7c9a95fc16545a1cb4d835a3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CloseHandle
GetTempPathA
GetTempFileNameA
CopyFileA
FreeEnvironmentStringsA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
UnhandledExceptionFilter
GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile
ReadFile
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE