Static task
static1
Behavioral task
behavioral1
Sample
81c27a1e1c0a13c30502504838cf2422588b946393bd6c38a96d38668cbca760.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
81c27a1e1c0a13c30502504838cf2422588b946393bd6c38a96d38668cbca760.exe
Resource
win10v2004-20220812-en
General
-
Target
81c27a1e1c0a13c30502504838cf2422588b946393bd6c38a96d38668cbca760
-
Size
294KB
-
MD5
bb9dc715b4f95fad71438d222813f4d9
-
SHA1
2314f0b69cfdc26c12903c7577f5ba4973f1ef86
-
SHA256
81c27a1e1c0a13c30502504838cf2422588b946393bd6c38a96d38668cbca760
-
SHA512
880290d33686ddb7bf0a2c69dabd39cf9416aa913146abe73520c9d3edd1b427e59e601735d3d70afab13644915cdb4bfd6eb5707924e35de9c5c2c2e7b289a9
-
SSDEEP
6144:gJR/QJeVWS64/vPJhYGLd2NbaKk80GhmhpwhANCd+5j7i:2YJfqpaedgU8OnQd+e
Malware Config
Signatures
Files
-
81c27a1e1c0a13c30502504838cf2422588b946393bd6c38a96d38668cbca760.exe windows x86
50e21954bde045717c5a7680b84b5d2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
SetWindowPos
GetActiveWindow
IsCharAlphaNumericW
EnumDesktopsW
DialogBoxParamA
OemKeyScan
SetPropA
ole32
CoFreeLibrary
CoUnmarshalHresult
OleFlushClipboard
kernel32
GetCurrentProcessId
CopyFileW
CreateProcessW
HeapFree
SizeofResource
GetStartupInfoA
HeapDestroy
SetFileAttributesA
HeapCreate
GetProcAddress
LoadLibraryExW
GetAtomNameA
AddAtomA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
FindAtomW
LocalFree
LocalAlloc
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ