Static task
static1
Behavioral task
behavioral1
Sample
81fd5e4cb3f3c1d51997edde02f0c38d95f4df849c01b2f6fbf328d88538f0dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81fd5e4cb3f3c1d51997edde02f0c38d95f4df849c01b2f6fbf328d88538f0dc.exe
Resource
win10v2004-20221111-en
General
-
Target
81fd5e4cb3f3c1d51997edde02f0c38d95f4df849c01b2f6fbf328d88538f0dc
-
Size
85KB
-
MD5
6dab6dd532eded8b441b60412ae21a50
-
SHA1
2604be255684315e980d0f1c90f9c1da031c937c
-
SHA256
81fd5e4cb3f3c1d51997edde02f0c38d95f4df849c01b2f6fbf328d88538f0dc
-
SHA512
eddcc59122472463586b9ddb20593d7b304956499cb0fd84e3b842734c62e9d556c6be3e9d03d60d3f02f0034d4c8dd3958a5c1df1ed17419e7c474305869aeb
-
SSDEEP
1536:4HS9qE5c5jmevQminLBTMceE64mgkGVZVdVlAqtt/kbThLPXa1vglyt:4KgDOndTMcL64Hz8r1aWlO
Malware Config
Signatures
Files
-
81fd5e4cb3f3c1d51997edde02f0c38d95f4df849c01b2f6fbf328d88538f0dc.exe windows x86
a3399db58a8c8a6b886576b31e2fbdce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ReadFile
LocalAlloc
GetLastError
SetFileAttributesA
GetModuleHandleA
CreateFileA
GetSystemTime
GetModuleFileNameA
HeapSize
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
msvcr90
__setusermatherr
_adjust_fdiv
_configthreadlocale
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
strlen
malloc
free
__p__commode
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ZZA Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ