Static task
static1
Behavioral task
behavioral1
Sample
81f6051558301dc2ba442ab7bd87016d56f5162ba25fca17409ac65ee2b5bc6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81f6051558301dc2ba442ab7bd87016d56f5162ba25fca17409ac65ee2b5bc6d.exe
Resource
win10v2004-20221111-en
General
-
Target
81f6051558301dc2ba442ab7bd87016d56f5162ba25fca17409ac65ee2b5bc6d
-
Size
16KB
-
MD5
59dc4941469d42da1104721bab42d8a0
-
SHA1
e518b99ec6c8936058dc2a295dee33197eaeafae
-
SHA256
81f6051558301dc2ba442ab7bd87016d56f5162ba25fca17409ac65ee2b5bc6d
-
SHA512
85f3009546762133bc794860f2ec87fe51c51989bb516e7e97e60b31873d353fbd01f041159f7c24779fafa20422c32a4a8cae7e1dc56b46ba829abae1e01dc7
-
SSDEEP
192:QV1Rno/pdPyXhb5jL+S+zwYr/rG0TQScPsJMnT1pl9PoEgFP1oynjKUSjHdOYtOZ:AFoxGbYzPMScPs+T/Pobx1gGIw
Malware Config
Signatures
Files
-
81f6051558301dc2ba442ab7bd87016d56f5162ba25fca17409ac65ee2b5bc6d.exe windows x86
ffa49b52b3176495ea7301e57f775cc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetModuleFileNameA
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
GetModuleHandleA
CreateMutexA
CopyFileA
WaitForSingleObject
CloseHandle
ExitProcess
CreateThread
GetVersionExA
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetTickCount
Sleep
DeleteFileA
GetCurrentProcess
ws2_32
htons
inet_addr
closesocket
recv
socket
WSAStartup
send
connect
gethostbyname
inet_ntoa
select
shell32
ShellExecuteA
advapi32
CreateServiceA
StartServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
DeleteService
OpenServiceA
OpenSCManagerA
StartServiceCtrlDispatcherA
SetServiceStatus
user32
wsprintfA
msvcrt
strncpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
memset
fclose
fwrite
fopen
strcpy
rand
srand
atoi
strcmp
strtok
_strnicmp
strstr
strlen
strcat
sprintf
_vsnprintf
_exit
_XcptFilter
exit
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE