Static task
static1
Behavioral task
behavioral1
Sample
b82a3cd78215722e0e2209c7c821862f667954bf13c05c6079c810e1101ee5df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b82a3cd78215722e0e2209c7c821862f667954bf13c05c6079c810e1101ee5df.exe
Resource
win10v2004-20220812-en
General
-
Target
b82a3cd78215722e0e2209c7c821862f667954bf13c05c6079c810e1101ee5df
-
Size
152KB
-
MD5
f26f1a32a4988464d28fe02ee5ae0014
-
SHA1
a563951d669fb6b4c4bccdeecc67183f091be115
-
SHA256
b82a3cd78215722e0e2209c7c821862f667954bf13c05c6079c810e1101ee5df
-
SHA512
df39632264c9549a27882c01a6e776eb66a7eb673a3cae0cd965eec405fc6f6c5bb5865aec48cb39830ecdbd93eac0e7dd9153e003255f3698f687f3b2d86e8c
-
SSDEEP
3072:/mu9o2Oz3Vho9x7AFX/hcKAXnRXWwiR7HjS95XZbQ8kNe5Pq00y:ByVrVh0x7mX/hcKUtWwihunXpQ8ny0t
Malware Config
Signatures
Files
-
b82a3cd78215722e0e2209c7c821862f667954bf13c05c6079c810e1101ee5df.exe windows x86
c90cd5e4d9092f498be2532a81d70cb0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
CreateEventA
SetSystemTime
GetModuleHandleA
GetConsoleTitleW
ExitThread
DeleteFileA
EnumCalendarInfoExA
GetStartupInfoA
DnsHostnameToComputerNameA
DeleteCriticalSection
user32
DefMDIChildProcW
GetMenuItemRect
CloseClipboard
ChildWindowFromPoint
DdeCmpStringHandles
GetClassInfoW
GetMenu
SubtractRect
EndDialog
SendMessageTimeoutW
UnregisterDeviceNotification
msvcrt
_XcptFilter
memcpy
__set_app_type
__setusermatherr
_exit
_initterm
_controlfp
exit
__p__fmode
__p__commode
_acmdln
__getmainargs
_adjust_fdiv
_except_handler3
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ