Static task
static1
Behavioral task
behavioral1
Sample
769159e89f03a270c36d2b55f3f25a3076a8e5e8dd582a47d1c2b3b11ce7ebdd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
769159e89f03a270c36d2b55f3f25a3076a8e5e8dd582a47d1c2b3b11ce7ebdd.exe
Resource
win10v2004-20220901-en
General
-
Target
769159e89f03a270c36d2b55f3f25a3076a8e5e8dd582a47d1c2b3b11ce7ebdd
-
Size
80KB
-
MD5
67f3695a62a67ef1b51cf053f81223e0
-
SHA1
b77b6289a1c197fa3806abc5329ac175ffbae7f4
-
SHA256
769159e89f03a270c36d2b55f3f25a3076a8e5e8dd582a47d1c2b3b11ce7ebdd
-
SHA512
e1c59245c172996953e0cdeb17dc881f4f9eb1c81f1d913dfabfe2609afd866f1335490a430bd62451e4252398827cfe8ab093f00203b788c4a24d8838717b11
-
SSDEEP
1536:30tPXPpdQISyEFHGp33deQbW5PBTXDhZx4ki+Adykovjpox2l:mPPpCDypLHuP1vx48hkovNox
Malware Config
Signatures
Files
-
769159e89f03a270c36d2b55f3f25a3076a8e5e8dd582a47d1c2b3b11ce7ebdd.exe windows x86
9447610bbe26b5334e7344ec1a827534
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
TlsSetValue
VirtualFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
GetCommandLineA
WriteFile
ExitProcess
HeapAlloc
GetOEMCP
GetACP
GetStartupInfoA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetStringTypeW
user32
GetSystemMetrics
advapi32
GetUserNameA
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ