Static task
static1
Behavioral task
behavioral1
Sample
81b0db220427420dadbeeec10b4e04b57f89a0705fa81f109df7b5b3a05f72bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81b0db220427420dadbeeec10b4e04b57f89a0705fa81f109df7b5b3a05f72bc.exe
Resource
win10v2004-20220812-en
General
-
Target
81b0db220427420dadbeeec10b4e04b57f89a0705fa81f109df7b5b3a05f72bc
-
Size
245KB
-
MD5
059c2d09558fed54262fb6f0d6b02b86
-
SHA1
31881c87857e61bfc90b3c29a3b5c44f93a873d6
-
SHA256
81b0db220427420dadbeeec10b4e04b57f89a0705fa81f109df7b5b3a05f72bc
-
SHA512
f99cbe48eee217cc562ae74f6d3e8b9d7773bd8a6333dbfbfae31efce78c38fbc22a6bbb4abadd782a08f4da844021557e2b9c5a404000ceaef3640dd872af26
-
SSDEEP
6144:h+DUzpKBVQke9VMtoa1zPc2B125+aU2LN7E9:h+DYe6keAooLBk+ay
Malware Config
Signatures
Files
-
81b0db220427420dadbeeec10b4e04b57f89a0705fa81f109df7b5b3a05f72bc.exe windows x86
c12d93755bd6911c5305b12abeee2bcf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetModuleHandleA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
advapi32
RegSetValueExA
shell32
CommandLineToArgvW
msvcrt
free
ws2_32
__WSAFDIsSet
netapi32
NetUserGetInfo
wininet
InternetOpenUrlA
iphlpapi
GetAdaptersInfo
user32
MessageBoxA
Sections
.text Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.rsrc1 Size: 244KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE