Static task
static1
Behavioral task
behavioral1
Sample
77f2314c53ae82a5487cb7037d4a40bbf3a5aafa50ac3666510ea6aa42e5bc0f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
77f2314c53ae82a5487cb7037d4a40bbf3a5aafa50ac3666510ea6aa42e5bc0f.exe
Resource
win10v2004-20220901-en
General
-
Target
77f2314c53ae82a5487cb7037d4a40bbf3a5aafa50ac3666510ea6aa42e5bc0f
-
Size
156KB
-
MD5
9e4f15a32ca600a891e88df4b75432b9
-
SHA1
6bfb98153c525e9c5ae8f12a053b1ebd4af15508
-
SHA256
77f2314c53ae82a5487cb7037d4a40bbf3a5aafa50ac3666510ea6aa42e5bc0f
-
SHA512
107b702d2b13b9b52790e8696517bc6eccee0ddd7643ec86a02dcb83eb0b74d52e5352e55572adb18f54d78b3ac5f24871a96997aa706f22cdbca33b85dabaa0
-
SSDEEP
1536:LvzNF0s8wYDP6/3OUpRK76sEdRxf878d:LvpN8wYDPxOm6sQR
Malware Config
Signatures
Files
-
77f2314c53ae82a5487cb7037d4a40bbf3a5aafa50ac3666510ea6aa42e5bc0f.exe windows x86
0d3971e27910d85fae431bd9f55d5459
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LocalFree
GetACP
VirtualFree
LocalFree
MultiByteToWideChar
LoadLibraryW
Sleep
InterlockedDecrement
VirtualFree
GetModuleHandleA
CreateThread
LocalFree
Sleep
GetModuleHandleA
GetProcAddress
DeleteCriticalSection
LocalFree
GetStartupInfoW
CreateThread
SetFilePointer
GetModuleFileNameA
GetProcAddress
MultiByteToWideChar
CreateFileW
FormatMessageW
EnterCriticalSection
VirtualFree
Sleep
GetVersionExA
HeapAlloc
GetProcessHeap
InitializeCriticalSection
GetStartupInfoW
GetModuleHandleW
lstrcmpiW
CloseHandle
InitializeCriticalSection
WaitForSingleObject
GetModuleHandleW
LoadLibraryW
GetProcessHeap
InterlockedIncrement
QueryPerformanceCounter
CreateFileW
DeleteCriticalSection
SetUnhandledExceptionFilter
GetTickCount
InitializeCriticalSection
VirtualFree
HeapFree
GetSystemTimeAsFileTime
WaitForSingleObject
GetModuleHandleW
CloseHandle
WaitForSingleObject
HeapDestroy
GetProcAddress
GetProcAddress
LoadLibraryW
SetUnhandledExceptionFilter
HeapFree
HeapDestroy
GetCommandLineW
EnterCriticalSection
GetVersionExA
EnterCriticalSection
CreateThread
FormatMessageW
lstrcpyW
HeapFree
FreeLibrary
GetLastError
InterlockedDecrement
InitializeCriticalSection
UnhandledExceptionFilter
EnterCriticalSection
ReadFile
TerminateProcess
GetModuleHandleA
LocalFree
MultiByteToWideChar
GetVersionExA
SetFilePointer
MultiByteToWideChar
EnterCriticalSection
VirtualFree
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc
ReadFile
GetCurrentProcessId
GetACP
CreateThread
WaitForSingleObject
LocalAlloc
HeapFree
GetProcAddress
HeapReAlloc
HeapAlloc
InterlockedIncrement
ReadFile
LoadLibraryW
WaitForSingleObject
HeapFree
InitializeCriticalSection
SetLastError
FreeLibrary
UnhandledExceptionFilter
GetModuleHandleW
HeapFree
LocalFree
GetVersionExA
GetStartupInfoA
CreateThread
GetCurrentProcessId
UnhandledExceptionFilter
SetFilePointer
FormatMessageW
GetProcAddress
GetModuleHandleA
Sleep
FormatMessageW
CreateFileW
LoadLibraryA
LocalAlloc
GetCommandLineW
GetProcessHeap
Sleep
GetCurrentProcessId
MultiByteToWideChar
Sleep
HeapAlloc
lstrlenW
SetLastError
TerminateProcess
ReadFile
DeleteCriticalSection
SetLastError
LeaveCriticalSection
ReadFile
GetACP
UnhandledExceptionFilter
FreeLibrary
GetCurrentProcess
GetLastError
ReadFile
FreeLibrary
CreateThread
GetCommandLineW
GetCurrentThreadId
SetFilePointer
LocalFree
GetStartupInfoA
GetTickCount
MultiByteToWideChar
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
HeapAlloc
GetCommandLineW
GetStartupInfoA
FormatMessageW
GetCurrentThreadId
ExitProcess
LeaveCriticalSection
InterlockedDecrement
GetCurrentProcessId
GetModuleHandleA
QueryPerformanceCounter
FreeLibrary
QueryPerformanceCounter
HeapAlloc
FormatMessageW
GetCurrentProcess
SetFilePointer
SetEvent
DeleteCriticalSection
GetTickCount
InterlockedIncrement
UnhandledExceptionFilter
HeapReAlloc
GetCommandLineW
QueryPerformanceCounter
GetStartupInfoW
GetACP
InterlockedDecrement
GetSystemTimeAsFileTime
GetCommandLineA
GetModuleHandleA
GetVersionExA
UnhandledExceptionFilter
lstrcpyW
GetModuleHandleA
EnterCriticalSection
WriteFile
CloseHandle
lstrcpyW
HeapAlloc
InitializeCriticalSection
WriteFile
ExitProcess
InterlockedDecrement
InitializeCriticalSection
GetStartupInfoW
GetCommandLineA
Sleep
CreateThread
HeapDestroy
InterlockedIncrement
GetACP
InitializeCriticalSection
GetModuleHandleA
InterlockedDecrement
SetFilePointer
GetACP
LoadLibraryW
Sleep
SetFilePointer
Sections
.test Size: 139KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.test Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.test Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE