Static task
static1
Behavioral task
behavioral1
Sample
82583f716aaf7c382e7afe27ee7a03d9e69ea0de45a4c5116b01ef68f6c4701f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82583f716aaf7c382e7afe27ee7a03d9e69ea0de45a4c5116b01ef68f6c4701f.exe
Resource
win10v2004-20220812-en
General
-
Target
82583f716aaf7c382e7afe27ee7a03d9e69ea0de45a4c5116b01ef68f6c4701f
-
Size
195KB
-
MD5
2d1055dace9ef6a4119f0a12cd27b030
-
SHA1
9c93651dffc96de6d623a3836e0e8f2ed5206f9d
-
SHA256
82583f716aaf7c382e7afe27ee7a03d9e69ea0de45a4c5116b01ef68f6c4701f
-
SHA512
adb8112769edcd631224a3f891538f7fe23de19bb38a9629e9d618b320e3c3272ecd5fa9663d026baad05af62fbc2283d5cad9d94656ca11d31093836477a2e1
-
SSDEEP
6144:e+MOjf0xmFxcvhKGE/msKcAJYirvbp/uuW0nIgUgMRIVQm:o0Fo639iHRlnIHPmVV
Malware Config
Signatures
Files
-
82583f716aaf7c382e7afe27ee7a03d9e69ea0de45a4c5116b01ef68f6c4701f.exe windows x86
3de82d459154e22900303769828dd3b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SystemParametersInfoW
GetDlgItemTextA
ReleaseDC
SetWindowTextW
LoadCursorW
EnableWindow
GetWindowLongW
SetDlgItemTextW
EndDialog
SetWindowLongW
LoadIconW
wsprintfW
SetFocus
GetDlgItem
RegisterClipboardFormatW
LoadImageW
SendMessageW
DialogBoxParamW
LoadStringW
LoadBitmapW
GetDC
SendDlgItemMessageW
PostMessageW
WinHelpW
GetParent
MessageBoxW
SetCursor
InsertMenuItemW
msvcrt
wcsstr
wcsrchr
_wcsupr
wcschr
_adjust_fdiv
wcscmp
vswprintf
_purecall
wcscpy
_initterm
wcstoul
free
wcslen
??2@YAPAXI@Z
_wcsicmp
malloc
_onexit
_except_handler3
__RTDynamicCast
__dllonexit
wcscat
?terminate@@YAXXZ
mbstowcs
??1type_info@@UAE@XZ
??3@YAXPAX@Z
memmove
certcli
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CACertTypeGetSecurity
CASetCertTypeProperty
CAGetCertTypeProperty
CAFreeCAProperty
CACreateCertType
CAFreeCertTypeExtensions
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CAAddCACertificateType
CACloseCA
CACloseCertType
CACertTypeSetSecurity
CAUpdateCertType
CAGetCertTypeKeySpec
CAGetCertTypePropertyEx
CAGetCertTypeFlags
CAEnumCertTypes
CASetCertTypeExtension
CASetCertTypeFlags
CAFindByName
CAGetCAProperty
CAUpdateCA
CAFindCertTypeByName
CAEnumNextCertType
kernel32
InterlockedIncrement
RemoveDirectoryA
SetLastError
GlobalUnlock
GlobalAlloc
WideCharToMultiByte
lstrlenW
GetComputerNameW
IsValidCodePage
QueryPerformanceCounter
CreateFileW
lstrcmpiW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetEnvironmentStringsA
GetTickCount
GetModuleHandleA
LocalReAlloc
InitializeCriticalSection
OutputDebugStringW
InterlockedDecrement
GetCPInfo
GetProcAddress
LoadLibraryW
GetCurrentProcess
GetModuleFileNameW
LocalFree
GetStartupInfoA
GetSystemTimeAsFileTime
CloseHandle
OutputDebugStringA
DeleteCriticalSection
GetACP
FormatMessageW
GlobalLock
IsBadReadPtr
GetLastError
GetDateFormatW
GetSystemWindowsDirectoryW
GlobalFree
SetUnhandledExceptionFilter
lstrcpyW
advapi32
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
comctl32
PropertySheetW
CreatePropertySheetPageW
shell32
ShellExecuteExW
ShellExecuteW
Sections
.code Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ