Static task
static1
Behavioral task
behavioral1
Sample
081b1611390711420f8d577031c23ad45bd98ccb20e453b080ea893fee516a61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
081b1611390711420f8d577031c23ad45bd98ccb20e453b080ea893fee516a61.exe
Resource
win10v2004-20220901-en
General
-
Target
081b1611390711420f8d577031c23ad45bd98ccb20e453b080ea893fee516a61
-
Size
1.2MB
-
MD5
81af393153848440be422d86c5bd89c0
-
SHA1
cb2be2309977597a8d1e2d7bc09cf63691dc93c9
-
SHA256
081b1611390711420f8d577031c23ad45bd98ccb20e453b080ea893fee516a61
-
SHA512
030c48dea08a9e60b5812be75198768652d347ca225a8c2bce962080bcc8e5f79dccd110703a06a60bf0df9ccc9c541406b325bee9ea4b76554385398a1292fb
-
SSDEEP
24576:nDHsykr7MhoKW/kGjjG7btB6lGogmMap/eW:nD9cDN/kqjG7pal
Malware Config
Signatures
Files
-
081b1611390711420f8d577031c23ad45bd98ccb20e453b080ea893fee516a61.exe windows x86
4da534297a7f3fab2a433e59e1c623d9
Code Sign
ab:8b:d8:6e:5c:e3:5b:69:6a:03:29:8a:7f:99:03:93:47:b3:a9:efSigner
Actual PE Digestab:8b:d8:6e:5c:e3:5b:69:6a:03:29:8a:7f:99:03:93:47:b3:a9:efDigest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualAllocEx
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleHandleA
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
FreeConsole
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
GetProcAddress
HeapSize
GetProcessHeap
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryExW
LockResource
InterlockedDecrement
HeapFree
InitializeCriticalSectionAndSpinCount
FreeLibrary
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FatalAppExitA
IsDebuggerPresent
Sleep
IsProcessorFeaturePresent
CreateSemaphoreW
GetModuleHandleW
lstrlenA
WideCharToMultiByte
LocalFree
lstrlenW
GetCommandLineW
EncodePointer
DecodePointer
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
user32
LoadIconW
LoadCursorW
EndPaint
BeginPaint
UpdateWindow
MessageBoxW
LoadStringW
LoadAcceleratorsW
EndDialog
DialogBoxParamW
ShowWindow
TranslateAcceleratorW
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
DestroyWindow
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ole32
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
shell32
ShellExecuteW
oleaut32
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SetErrorInfo
VariantChangeType
VariantInit
VariantClear
SysAllocString
GetErrorInfo
CreateErrorInfo
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 999KB - Virtual size: 999KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ