Static task
static1
Behavioral task
behavioral1
Sample
c82b20dc64d974087a4bb357c24e96bd0a75dc27565bd72339cf78322e57965c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c82b20dc64d974087a4bb357c24e96bd0a75dc27565bd72339cf78322e57965c.exe
Resource
win10v2004-20221111-en
General
-
Target
c82b20dc64d974087a4bb357c24e96bd0a75dc27565bd72339cf78322e57965c
-
Size
192KB
-
MD5
b40050010171590fbd96f2f3460effa2
-
SHA1
a7a0e2d1fe9f6f87293a50ff71b80a0d112a75ce
-
SHA256
c82b20dc64d974087a4bb357c24e96bd0a75dc27565bd72339cf78322e57965c
-
SHA512
0b65a4c4cab0b887a117c0df420b87ba06ba94992646ca6f6f51fd67a81556340c57deffa87786062805d5b815dc508a179c9b5ec35df564f9dc88aeb5f5337f
-
SSDEEP
3072:2bV5dIvjDLd77Pl03KwkwXgpnJoBbQ1nLHwzG:2bTWd77N06wkwXghJoxQNHwK
Malware Config
Signatures
Files
-
c82b20dc64d974087a4bb357c24e96bd0a75dc27565bd72339cf78322e57965c.exe windows x86
1b6b086283d39ce5831a85bd62d07442
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
GetFileTime
GetFileSize
FindAtomA
GetCPInfo
ReadFile
GetCommandLineA
CopyFileW
GetConsoleMode
CreateDirectoryA
CreateThread
CopyFileExW
ExitThread
DeleteFileW
GetComputerNameA
ReadConsoleA
OpenFileMappingA
GetCPInfo
ReadConsoleA
FindAtomA
ReadFile
GetStdHandle
CopyFileW
GlobalFree
GetCommandLineA
CreateThread
GetComputerNameA
GetFileSize
CopyFileA
GetFileTime
ReadConsoleW
DeleteFileW
GlobalFree
DeleteAtom
GetComputerNameA
Sleep
FindAtomA
GetConsoleMode
GetLastError
OpenFile
OpenFileMappingA
WriteFile
CreateThread
ExitThread
CopyFileExA
GetFileSize
ReadFile
CopyFileW
FindFirstFileA
GetFileTime
OpenFile
CopyFileExA
CopyFileA
ReadConsoleW
CopyFileExW
ExitThread
ReadConsoleA
ReadFile
GlobalFree
CreateDirectoryA
OpenFileMappingA
CreateThread
CreateProcessA
DeleteFileA
WriteFile
CopyFileW
FindFirstFileA
ReadConsoleW
ReadConsoleA
DeleteFileW
GetComputerNameA
GetFileSize
DeleteAtom
CreateProcessA
Sleep
GetFileTime
GlobalFree
Sections
.init Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ