Static task
static1
Behavioral task
behavioral1
Sample
81959c69f94ff55cdb51e8efee79209ede2e9cdb9f16cb015aca97fa05b8b5d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81959c69f94ff55cdb51e8efee79209ede2e9cdb9f16cb015aca97fa05b8b5d2.exe
Resource
win10v2004-20220812-en
General
-
Target
81959c69f94ff55cdb51e8efee79209ede2e9cdb9f16cb015aca97fa05b8b5d2
-
Size
320KB
-
MD5
a2a473afca6965c6b1055dca3b0b9b90
-
SHA1
4728c55eddbd73a46f21779ab35d71f9cb64dc01
-
SHA256
81959c69f94ff55cdb51e8efee79209ede2e9cdb9f16cb015aca97fa05b8b5d2
-
SHA512
5ef6fbd9aa8b0323a5c400349549c9c72106a20260fb0cd66856eccaaa3f08cb8081e4b72e68bf0a350a8a82b8150c64b4f52547f94bfda035b9944a7ac0c913
-
SSDEEP
6144:/CYOGUeH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:/CEUE2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
81959c69f94ff55cdb51e8efee79209ede2e9cdb9f16cb015aca97fa05b8b5d2.exe windows x86
027a2a63c3197f66f514a7a0d5537370
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameA
WriteConsoleInputW
CopyLZFile
SetDefaultCommConfigA
OpenWaitableTimerW
Heap32First
GetSystemWindowsDirectoryW
VirtualAllocEx
SetFileApisToOEM
UnlockFile
SetConsoleCommandHistoryMode
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE