Static task
static1
Behavioral task
behavioral1
Sample
81cb6f7947bf771d402451eee06db37e5a3d7bc02e4bf8dcb31f1a0bd09367fe.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
81cb6f7947bf771d402451eee06db37e5a3d7bc02e4bf8dcb31f1a0bd09367fe.dll
Resource
win10v2004-20220901-en
General
-
Target
81cb6f7947bf771d402451eee06db37e5a3d7bc02e4bf8dcb31f1a0bd09367fe
-
Size
100KB
-
MD5
36aa9b4b1703722fc6650582d362bada
-
SHA1
b1d4b7625aed74d548c9a4708ddd867d75a891d5
-
SHA256
81cb6f7947bf771d402451eee06db37e5a3d7bc02e4bf8dcb31f1a0bd09367fe
-
SHA512
da9166bff7421cdbd46377e4ff33a1b832fb1b66a8bd7fc7df145f79297393d5637619624cb4bdc9275fcd841d4152c0ca945a5eb9322be9accb1ca9dffde3c6
-
SSDEEP
3072:XF1wsyOxODY/YHJ2i3SNCXY22b6uNdwQ8Q:XFTxOhJwNCybbT
Malware Config
Signatures
Files
-
81cb6f7947bf771d402451eee06db37e5a3d7bc02e4bf8dcb31f1a0bd09367fe.dll windows x86
603208370d48813ece15a03cff3c66dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnregisterWaitEx
LeaveCriticalSection
lstrcat
MoveFileWithProgressA
lstrlenA
lstrcpy
LockFileEx
OpenProfileUserMapping
SearchPathA
GetUserDefaultLangID
PeekConsoleInputA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 8KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ