Static task
static1
Behavioral task
behavioral1
Sample
81c375baca6be36aa05dc9e73e576fa923f1569b27d40540d4292fc14871e6a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81c375baca6be36aa05dc9e73e576fa923f1569b27d40540d4292fc14871e6a4.exe
Resource
win10v2004-20220901-en
General
-
Target
81c375baca6be36aa05dc9e73e576fa923f1569b27d40540d4292fc14871e6a4
-
Size
127KB
-
MD5
a0c58456799141bdd434cf3a8dc43cb0
-
SHA1
99523927feb145ae8b22aa9ab02f24257f16a23d
-
SHA256
81c375baca6be36aa05dc9e73e576fa923f1569b27d40540d4292fc14871e6a4
-
SHA512
b521ee79e3560af569ddce36262dd34ccdf022f2650631e2a178ffb5137fba36877ed4d25acbe6d6d639656f1d9d0248f05376f96fd6e093f418d53dbb400f36
-
SSDEEP
768:eLe9swFzsYbldLC5DWEYCh+NfJW+KCO5Ru8joGAt6/MOCb2IZhOWpdhSVHjxBHnj:SQvzbl1C5DWBCJdgnOW/kdxBeunV/v
Malware Config
Signatures
Files
-
81c375baca6be36aa05dc9e73e576fa923f1569b27d40540d4292fc14871e6a4.exe windows x86
d71385a36f3ece46e335abdfdd5e1914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
usp10
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetGlyphABCWidth
ScriptIsComplex
ScriptItemize
ScriptJustify
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptTextOut
ScriptXtoCP
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
memset
atoi
memcpy
kernel32
GetStartupInfoW
GetModuleHandleW
GetVolumeInformationW
CreateFileW
GetLocalTime
VirtualProtectEx
SetSystemTimeAdjustment
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 80KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE