Static task
static1
Behavioral task
behavioral1
Sample
7779656203786082528498db2bf01456a6afb0f2528edb8f79a083e2767e34a3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7779656203786082528498db2bf01456a6afb0f2528edb8f79a083e2767e34a3.exe
Resource
win10v2004-20220812-en
General
-
Target
7779656203786082528498db2bf01456a6afb0f2528edb8f79a083e2767e34a3
-
Size
83KB
-
MD5
0c262e3159412e414d3ec49b14646720
-
SHA1
dee78a7083d6180236d29edc2de659570e3a7b13
-
SHA256
7779656203786082528498db2bf01456a6afb0f2528edb8f79a083e2767e34a3
-
SHA512
e80c6f4cf04d5abd2fb1f981a6dc1c18e52bd9c6651c886b3667690eaf148753f2c9fdfe0de0b9fdded86ef58262a1a00bbcb6bdab42173b1b20078cd211134f
-
SSDEEP
1536:D18MZsjPpVkEBFbOxVXr19SEpVQwRFVi7rd/8TypjVrs2ryrd1vUQuq8:D1WjZFbOxVXrNpSc8x8GHs2q
Malware Config
Signatures
Files
-
7779656203786082528498db2bf01456a6afb0f2528edb8f79a083e2767e34a3.exe windows x86
479103aa4fa874c2351ad90a90c022d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
lstrcpyn
ZombifyActCtx
QueueUserWorkItem
LeaveCriticalSection
ResumeThread
ReleaseSemaphore
LoadLibraryW
FindNextFileA
FindActCtxSectionStringA
GlobalFix
VirtualUnlock
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE