Static task
static1
Behavioral task
behavioral1
Sample
81e9dc9bf1c416b68d40101cf6ea0e7ff8c5bb1b7b5d8113dd9fc41c48986437.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81e9dc9bf1c416b68d40101cf6ea0e7ff8c5bb1b7b5d8113dd9fc41c48986437.exe
Resource
win10v2004-20220812-en
General
-
Target
81e9dc9bf1c416b68d40101cf6ea0e7ff8c5bb1b7b5d8113dd9fc41c48986437
-
Size
302KB
-
MD5
0c86188347321afa356110203682724a
-
SHA1
c57cab5fce58878575474a6e706c0ac418742755
-
SHA256
81e9dc9bf1c416b68d40101cf6ea0e7ff8c5bb1b7b5d8113dd9fc41c48986437
-
SHA512
9024f80669217040c5348a6bbc5e637fd9e1bb7e211b0ab7e1f02729f4ef23f5d064c685a50b86e3a67fa6bbc49819c407f48317daa610cbe325910550d7da91
-
SSDEEP
6144:+cptQCMWJiAlOGLeM9EJLmPKk6m1GqvqThUiD1p2T/gOGQ:3paLXWOGLeMeJLSK5mDiz93
Malware Config
Signatures
Files
-
81e9dc9bf1c416b68d40101cf6ea0e7ff8c5bb1b7b5d8113dd9fc41c48986437.exe windows x86
e6ce1440fab0803b9cb49f9b0977a8c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkW
GlobalFree
DeleteFileW
GetFileSize
HeapSize
CreateDirectoryW
OpenSemaphoreA
Sleep
SetLastError
MapViewOfFile
GetLocalTime
GetProcessHeap
CreateMutexW
SetEvent
CreateSemaphoreA
CreateFileA
GetStartupInfoA
SetLastError
LoadLibraryA
GetStdHandle
ReadConsoleW
VirtualProtect
GetFileAttributesA
GetPriorityClass
GetTickCount
userenv
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
CleanupCache
SsdpCleanup
FindServices
SsdpStartup
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE