Static task
static1
Behavioral task
behavioral1
Sample
81d91bd4f6304c00d1d8d299c8af4c58ec441b277caa38cbba7c2ba10b3ecde1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81d91bd4f6304c00d1d8d299c8af4c58ec441b277caa38cbba7c2ba10b3ecde1.exe
Resource
win10v2004-20220812-en
General
-
Target
81d91bd4f6304c00d1d8d299c8af4c58ec441b277caa38cbba7c2ba10b3ecde1
-
Size
255KB
-
MD5
6538ac906cf919374032519a03fdd630
-
SHA1
8a216c0268ba364639e72004840142bd3287c100
-
SHA256
81d91bd4f6304c00d1d8d299c8af4c58ec441b277caa38cbba7c2ba10b3ecde1
-
SHA512
444e07e0d0b0f0e418df75bad8af298295a1cf52c72a28c296ac9f39113cbda5dd9a4ec1447dc40fbbfc4ac0a6ca76cf4d8c7a978680bffece20031aaf955ea6
-
SSDEEP
6144:qMkrBmKn1OpWXgwRv0eL3M5PmCW4QzdT5V:qWK1g4xvtDyNULV
Malware Config
Signatures
Files
-
81d91bd4f6304c00d1d8d299c8af4c58ec441b277caa38cbba7c2ba10b3ecde1.exe windows x86
1c5778299852eedb12e395386b5441dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
OpenMutexA
EnterCriticalSection
ReleaseMutex
ReadFileEx
lstrcmpA
FindNextFileA
UnmapViewOfFile
ReleaseSemaphore
lstrcpyn
lstrlenA
OpenEventA
CreateFileA
LCMapStringW
lstrlen
CloseHandle
SetEvent
InterlockedDecrement
WaitForSingleObjectEx
lstrcpyA
lstrcpynW
GetProcAddress
InterlockedIncrement
GlobalFree
GetCurrentProcessId
GetSystemInfo
ResetEvent
GetModuleFileNameA
VirtualFree
WriteFileEx
WaitForSingleObject
GetLastError
WriteFile
MapViewOfFile
lstrlenW
lstrcpynA
FindClose
CreateSemaphoreA
GetCPInfo
GlobalAlloc
GlobalFindAtomW
FindFirstFileA
GetDiskFreeSpaceA
SetThreadPriority
GetTickCount
GetEnvironmentStringsA
GetSystemDefaultLangID
GetUserDefaultLangID
SetEndOfFile
CompareStringW
OpenSemaphoreA
GetFileAttributesA
FreeLibrary
LeaveCriticalSection
SetFilePointer
WaitForMultipleObjects
RemoveDirectoryA
OutputDebugStringA
CreateDirectoryA
LoadLibraryW
ReadFile
GetEnvironmentStringsW
CreateThread
DeleteCriticalSection
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ