Static task
static1
Behavioral task
behavioral1
Sample
77ecadd8d7cd9205c9ee3bf0833cd8d3599e4fccaa4237c88504aac06bc42cca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77ecadd8d7cd9205c9ee3bf0833cd8d3599e4fccaa4237c88504aac06bc42cca.exe
Resource
win10v2004-20220901-en
General
-
Target
77ecadd8d7cd9205c9ee3bf0833cd8d3599e4fccaa4237c88504aac06bc42cca
-
Size
245KB
-
MD5
565fc4743677c2abe73eadd511600d2e
-
SHA1
b67ca38bac5af9dc5b198c3d7d79f2a5e2c22503
-
SHA256
77ecadd8d7cd9205c9ee3bf0833cd8d3599e4fccaa4237c88504aac06bc42cca
-
SHA512
c7c67128a899dab8d5d746be37ea39189ca9d50813824327ed892543a023a3d664dd1b7603ae1eb345f2493ff3d4350f7a8e6a28a7bb0137ea949f3dd97de92c
-
SSDEEP
6144:Mh/AWCXCzUxEMNkAL6Eb9PJJFZO3qjKNFcBCl3qHSTCKq27aA8zQTkD:MhoWC05MNkAtb9PJQasqBCUy2Kq2uA8f
Malware Config
Signatures
Files
-
77ecadd8d7cd9205c9ee3bf0833cd8d3599e4fccaa4237c88504aac06bc42cca.exe windows x86
9c9209f2df3c43f87c965e3e9654e504
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemLocalesA
GetTimeFormatA
GetFullPathNameA
WriteConsoleOutputW
GetOEMCP
GetNumberFormatA
HeapAlloc
LoadLibraryA
TlsGetValue
SetConsoleCtrlHandler
VirtualFree
DeleteFiber
IsDebuggerPresent
GetACP
TlsAlloc
TlsFree
FreeEnvironmentStringsW
GetStdHandle
GetStringTypeA
GetEnvironmentVariableW
SetUnhandledExceptionFilter
GetDateFormatA
GetStringTypeW
GetEnvironmentStringsW
GetConsoleOutputCP
HeapCreate
UnhandledExceptionFilter
GetStartupInfoW
GetProcAddress
CompareStringA
GetStartupInfoA
HeapFree
FindFirstFileA
GetCurrentThread
AddAtomW
HeapDestroy
VirtualQuery
MultiByteToWideChar
WriteFile
SetHandleCount
FreeLibrary
InitializeCriticalSectionAndSpinCount
TlsSetValue
GetModuleHandleW
HeapReAlloc
LeaveCriticalSection
ExitProcess
EnumResourceNamesW
LCMapStringW
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
IsValidCodePage
GetModuleHandleA
GetLocaleInfoA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetLastError
WideCharToMultiByte
GetCommandLineW
GetLocaleInfoW
GetCurrentProcessId
GetModuleFileNameA
IsValidLocale
GetCPInfo
FindAtomW
GetTickCount
GetUserDefaultLCID
EnterCriticalSection
GetLastError
Sleep
SetEnvironmentVariableA
RtlUnwind
GetFileType
GetSystemTimeAsFileTime
InterlockedExchange
LCMapStringA
DeleteCriticalSection
CompareStringW
GetModuleFileNameW
ReadConsoleOutputA
GetTimeZoneInformation
HeapSize
comdlg32
ChooseColorW
ReplaceTextA
PrintDlgA
FindTextW
PageSetupDlgW
GetFileTitleW
FindTextA
LoadAlterBitmap
GetSaveFileNameA
GetSaveFileNameW
ChooseColorA
GetOpenFileNameW
PrintDlgW
ChooseFontW
ChooseFontA
PageSetupDlgA
GetOpenFileNameA
GetFileTitleA
advapi32
CryptGetKeyParam
LookupPrivilegeNameW
CryptExportKey
CryptHashSessionKey
RegSetValueW
RegQueryValueA
CryptEnumProviderTypesA
CryptGetDefaultProviderW
CryptSetProviderW
wininet
InternetQueryDataAvailable
InternetSetOptionW
InternetCanonicalizeUrlA
InternetGetCertByURL
RetrieveUrlCacheEntryFileA
InternetSetCookieA
HttpOpenRequestA
GetUrlCacheEntryInfoA
GetUrlCacheConfigInfoW
GopherCreateLocatorA
CreateUrlCacheContainerW
SetUrlCacheEntryGroupW
InternetGetConnectedStateExA
InternetOpenUrlA
GetUrlCacheGroupAttributeW
DeleteUrlCacheEntry
InternetWriteFileExW
HttpAddRequestHeadersW
FindFirstUrlCacheGroup
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ