Static task
static1
Behavioral task
behavioral1
Sample
81dd549da7fd6f3f7a03df12c0feca427e04b9aa7c30f2b771766ec9fec445f7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81dd549da7fd6f3f7a03df12c0feca427e04b9aa7c30f2b771766ec9fec445f7.exe
Resource
win10v2004-20221111-en
General
-
Target
81dd549da7fd6f3f7a03df12c0feca427e04b9aa7c30f2b771766ec9fec445f7
-
Size
55KB
-
MD5
8b111cc75ff52a471643c7cedf17aa94
-
SHA1
da76da9ba804c83100d6e848ba3977fc6394c063
-
SHA256
81dd549da7fd6f3f7a03df12c0feca427e04b9aa7c30f2b771766ec9fec445f7
-
SHA512
d31ca48b0bae4f34c318f1c078e4fa2f2cac76a34a973616ca0ea13c9f397daed4f1a6347d3a6d6e57699f23532dd535e69506ad21eb73a38e2394047c0057ae
-
SSDEEP
768:cG4NjFNXLaDIVLP7xUoYzPGKI3UaH1kS31PL8nvq+5/oBJsL:GBLaDIVL6ogPRFaH1k+o3o
Malware Config
Signatures
Files
-
81dd549da7fd6f3f7a03df12c0feca427e04b9aa7c30f2b771766ec9fec445f7.exe windows x86
b0ad979d6362d33594cc48a91a523758
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cswrt
_TPrealloc@12
tpdb
_TDBGetDirSpecInfo@12
_TDBEnumKeywordsForFile@16
_TDBSetErrorCallback@4
_TDBOpen@16
_TDBStatistics@8
_TDBEnumThumbsOnPath@20
kernel32
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCommandLineA
GetVersion
ExitProcess
GetLastError
FlushFileBuffers
WriteFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
LoadLibraryA
GetModuleFileNameA
FreeEnvironmentStringsA
SetStdHandle
CloseHandle
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
SetFilePointer
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE