Static task
static1
Behavioral task
behavioral1
Sample
77efe4e4e2a8dfe53c40cb6dc6d353d106e04d11bd7f34f39f447c8efada14fe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
77efe4e4e2a8dfe53c40cb6dc6d353d106e04d11bd7f34f39f447c8efada14fe.exe
Resource
win10v2004-20220812-en
General
-
Target
77efe4e4e2a8dfe53c40cb6dc6d353d106e04d11bd7f34f39f447c8efada14fe
-
Size
110KB
-
MD5
80152a031a3d3bcd48ca50a094dc7b20
-
SHA1
8fa7716a82c2fd7809cc2ce6389c3442506cc944
-
SHA256
77efe4e4e2a8dfe53c40cb6dc6d353d106e04d11bd7f34f39f447c8efada14fe
-
SHA512
089a4a28adb9cfe503c06186e69b13d62984936177084ebd0281a266140f6fe6986e77a57b21521f040df48dc1dded71ba00d3ca2fd66fa8aa37fe694b423df0
-
SSDEEP
3072:441fanK1CWeeudkIjVhHhTMjtbsoUvJmEUKun/:481zudfVh9M9soUvJmEb2
Malware Config
Signatures
Files
-
77efe4e4e2a8dfe53c40cb6dc6d353d106e04d11bd7f34f39f447c8efada14fe.exe windows x86
1b2401c17ab43833e46d62889e33a886
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventUnregister
msvcrt
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
_controlfp
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
??3@YAXPAX@Z
_exit
_cexit
__getmainargs
__p__commode
comctl32
InitCommonControlsEx
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
kernel32
GetModuleFileNameW
CloseHandle
LoadLibraryW
GetLastError
CreateMutexW
CreateEventW
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
UnhandledExceptionFilter
FormatMessageW
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess
FreeLibrary
gdi32
DeleteObject
user32
FindWindowW
IsWindowVisible
ShowWindow
BringWindowToTop
SetForegroundWindow
PeekMessageW
MsgWaitForMultipleObjects
LoadStringW
MessageBoxW
cmnclim
DisplayFatalApplicationErrorMessage
CreateZoneShell
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE