Static task
static1
Behavioral task
behavioral1
Sample
82c4821a6a581aa3403c014590d5a4b46ef4e6fa5b14d9c660586f17ed4abd8c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
82c4821a6a581aa3403c014590d5a4b46ef4e6fa5b14d9c660586f17ed4abd8c.exe
Resource
win10v2004-20221111-en
General
-
Target
82c4821a6a581aa3403c014590d5a4b46ef4e6fa5b14d9c660586f17ed4abd8c
-
Size
516KB
-
MD5
a0e1c321f2e353b34275d97ebe63a2c0
-
SHA1
cbcf7f81db5b4a8e96e1cf0826e979c65f2c0854
-
SHA256
82c4821a6a581aa3403c014590d5a4b46ef4e6fa5b14d9c660586f17ed4abd8c
-
SHA512
3d987f831abcc41a842aa6a76bf9e5030b207aa0212bed7c0ad136dddde598d814471fc893adbdb209a057c7033522c501ed34c5f0be72387f2ebb22d24bb370
-
SSDEEP
6144:5c7isO1h4P6pClHZjVHiyUrIdJdZxcXYfIJ7Gz7ZoaDoxIIkt/uKwv2x87EV9O:5K0aagHZjV1XdbcXnGPZoaE0cuxEc
Malware Config
Signatures
Files
-
82c4821a6a581aa3403c014590d5a4b46ef4e6fa5b14d9c660586f17ed4abd8c.exe windows x86
203329ce511158380660524ad296cfd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
VirtualFree
WaitForSingleObject
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetCurrentProcess
DeleteTimerQueue
GetTickCount
GetSystemTime
GetCurrentProcessId
GetLastError
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
VirtualQuery
user32
IsIconic
LoadAcceleratorsA
GetClientRect
psapi
GetModuleBaseNameA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 40KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ