Static task
static1
Behavioral task
behavioral1
Sample
81ec8c39b358743f0a6a9864656b02745df22eb39f82a088560944003154e654.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81ec8c39b358743f0a6a9864656b02745df22eb39f82a088560944003154e654.exe
Resource
win10v2004-20221111-en
General
-
Target
81ec8c39b358743f0a6a9864656b02745df22eb39f82a088560944003154e654
-
Size
175KB
-
MD5
f4573e152889353800bf2fcfd428af1e
-
SHA1
0cca6abaf5d9153b056d29da500a9a2f9d7877e5
-
SHA256
81ec8c39b358743f0a6a9864656b02745df22eb39f82a088560944003154e654
-
SHA512
2cb890e815b87ab81a717b82129ab90fa1944bc679eb52fcef722746a60ac626289c3d0ca4537628333df6ff8786b268fc82d9315cd558db907b279f340b7e96
-
SSDEEP
3072:gvxF3b1AyTqOFnfHUzZh3b0fTHkE2ZuMQdQr/xtWifLOrGMNbQNNM5a:JXOhfHUzZZcHkZAOrptWilMNMNNM5a
Malware Config
Signatures
Files
-
81ec8c39b358743f0a6a9864656b02745df22eb39f82a088560944003154e654.exe windows x86
56a6397a24185ec29ddf9c3880c09fce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetTopWindow
CharNextA
GetKeyState
CharLowerA
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
msimg32
AlphaBlend
TransparentBlt
kernel32
GetThreadPriority
InterlockedDecrement
TransmitCommChar
LoadLibraryW
EnumResourceNamesW
ExitProcess
FreeLibrary
LoadLibraryA
GetProcAddress
InterlockedIncrement
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ