?V_T@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
772e28f5a9255a10edd35138260341a37df0949d7b205a3a5720f70352b1de71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
772e28f5a9255a10edd35138260341a37df0949d7b205a3a5720f70352b1de71.exe
Resource
win10v2004-20220901-en
General
-
Target
772e28f5a9255a10edd35138260341a37df0949d7b205a3a5720f70352b1de71
-
Size
444KB
-
MD5
0a3d1d16227172d6340ce32e8d1abd30
-
SHA1
73b6dd32252d683a1938f0e005c090a6fe0dcc0b
-
SHA256
772e28f5a9255a10edd35138260341a37df0949d7b205a3a5720f70352b1de71
-
SHA512
e7f7997c00e2f9bfed034f5dc341a66cb0f0437221053ccdd6d6e02724d3fec2f49ee9b7694725731fc8ec803fda3bc4b34e2f536ab288f427574c9be18e8b90
-
SSDEEP
12288:sMWZ8M2LBTgT2VUSgG29fpFOmlnv91U0PTpB6:Y12LlYUUSIxn9v0mS
Malware Config
Signatures
Files
-
772e28f5a9255a10edd35138260341a37df0949d7b205a3a5720f70352b1de71.exe windows x86
7ecb3805e3dd0d5fc45688aa4a9d8082
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
OpenEventA
VirtualAlloc
GetLastError
DeleteFileA
VirtualFree
ResumeThread
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
TerminateProcess
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
HeapReAlloc
RtlUnwind
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
LoadBitmapA
DestroyWindow
SetActiveWindow
GetFocus
EnableWindow
ole32
CoCreateInstance
CoInitialize
CoUninitialize
winmm
mmioRenameA
midiStreamRestart
dnsapi
DnsAcquireContextHandle_A
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 869KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ