Static task
static1
Behavioral task
behavioral1
Sample
81f8c6c4041d487e343cd3fe41722cc456ed7f73fd55a8f20115e05af4804261.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81f8c6c4041d487e343cd3fe41722cc456ed7f73fd55a8f20115e05af4804261.exe
Resource
win10v2004-20220901-en
General
-
Target
81f8c6c4041d487e343cd3fe41722cc456ed7f73fd55a8f20115e05af4804261
-
Size
21KB
-
MD5
35dee705f36ebc7304af0047aadca1ca
-
SHA1
0a09074ab54ab8f14bd707e34d81ab3c51a388ec
-
SHA256
81f8c6c4041d487e343cd3fe41722cc456ed7f73fd55a8f20115e05af4804261
-
SHA512
ff1e2e762bb42dd080f1978236238c060c0c42f45a38c42c6bac60e5dc2a7603a841397e6284c323ee544154cdb1660d67688b0a5bb1badab5b8535b38a3897b
-
SSDEEP
96:Ia9CSFKF80wiUjnMgyjZISo/44hH7P/o7A5Az2KBopPtboyn2a0GZ+ANd08iwXND:IOOs5j1wZISa88i0P1oynWGS8ZdD
Malware Config
Signatures
Files
-
81f8c6c4041d487e343cd3fe41722cc456ed7f73fd55a8f20115e05af4804261.exe windows x86
4da0dbf4f5b6fda32bc7caea01968717
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
Sleep
CreateProcessA
GetLastError
GetStartupInfoA
GetProcAddress
FreeLibrary
OutputDebugStringA
GetSystemDirectoryA
shell32
DoEnvironmentSubstA
SHGetSpecialFolderPathA
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcpy
_except_handler3
_controlfp
strcat
sprintf
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ