Static task
static1
Behavioral task
behavioral1
Sample
81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a.exe
Resource
win10v2004-20221111-en
General
-
Target
81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a
-
Size
18KB
-
MD5
840b3b6a714f7330706f0c19f99d5eb8
-
SHA1
6bd97b730e176560752902a2cfe968db6c7860e3
-
SHA256
81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a
-
SHA512
ad2816a99f227ca6e5e3f9e2c117f2a5311d98e635619d4d163d3db9369ebd511167715685588b6cde85a5176216e317d947f3ddf94450195ba7cbace53cfd17
-
SSDEEP
192:K790pylszn3MPFjuOZrCZ047a1oyn361miLMgepar8Vd/:s2pzn4sOZrCv7a18wiLMge68Vd
Malware Config
Signatures
Files
-
81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a.exe windows x86
87de4726176398505728aeed27b55948
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_XcptFilter
_except_handler3
__set_app_type
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
SendMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
DialogBoxParamA
kernel32
GetModuleFileNameA
GetLogicalDriveStringsA
GetEnvironmentStringsA
DeleteFileA
lstrcpynA
CloseHandle
GetStdHandle
HeapCreate
GetModuleHandleA
GetProcessHeap
HeapAlloc
CreateFileA
GetStartupInfoA
GetFileType
HeapFree
GetFileSize
GetTickCount
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ