Static task
static1
Behavioral task
behavioral1
Sample
181dc9562408ac01c525b2b9f952383fceef85727a8f840b9586aa6b35e1118f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
181dc9562408ac01c525b2b9f952383fceef85727a8f840b9586aa6b35e1118f.exe
Resource
win10v2004-20220812-en
General
-
Target
181dc9562408ac01c525b2b9f952383fceef85727a8f840b9586aa6b35e1118f
-
Size
45KB
-
MD5
8177ad6acf1b4577569f59f8cba13270
-
SHA1
2a6394093a9669bb001b8e582044f8840d2e571c
-
SHA256
181dc9562408ac01c525b2b9f952383fceef85727a8f840b9586aa6b35e1118f
-
SHA512
b623f43b75ae9e71dc2e5e8cb050e772a812d48820cbbe096f6ef67e3e638b47a3a7b219ebf0f718e265212f82159bbee499574d7bba17a0f2cb7dcddb98e981
-
SSDEEP
768:vCU3thf13kNFJoCZl75WgEFAJTND/a9YEvyUN7c7KrLNt7ZG8mHyhUP+I:vx9VVYZ5dEelA9vyacOrcyhy
Malware Config
Signatures
Files
-
181dc9562408ac01c525b2b9f952383fceef85727a8f840b9586aa6b35e1118f.exe windows x86
fd31c99c2d423d3ca201efcce47f9e62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
DebugActiveProcess
DebugBreak
DeviceIoControl
ExitProcess
FatalExit
GetCommandLineA
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileA
GetThreadContext
GetTickCount
GetVersionExA
IsDebuggerPresent
OutputDebugStringA
ReadFile
ReadProcessMemory
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteFile
CopyFileA
GetProcAddress
CloseHandle
wsock32
WSAStartup
WSACleanup
gethostbyname
user32
MessageBoxA
gdi32
SetTextAlign
PolyTextOutA
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE