Static task
static1
Behavioral task
behavioral1
Sample
77ed327036560683576cb880f416ffeeb9ee43185edd12965474043c1e540f1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77ed327036560683576cb880f416ffeeb9ee43185edd12965474043c1e540f1c.exe
Resource
win10v2004-20220812-en
General
-
Target
77ed327036560683576cb880f416ffeeb9ee43185edd12965474043c1e540f1c
-
Size
66KB
-
MD5
4816a027e1f10b011fa11173c794af2c
-
SHA1
ec9f5669ad8d438175afe98a93ab5a0c8bf45873
-
SHA256
77ed327036560683576cb880f416ffeeb9ee43185edd12965474043c1e540f1c
-
SHA512
e3dee8d5123cfa249556e49a13da7cabe97bfff9157db99cc6702383f2b0f9d42ad8cd1495f99ea56a1673ddb3bbba92b7bad92752d4d9e962c5d675af8d5909
-
SSDEEP
1536:JBs7cUFxdzpjoWPTOf6F2Grcsd8lNQ/cTj2IsVsQNXY8:GFx9BLFqu80/cP2Is/X1
Malware Config
Signatures
Files
-
77ed327036560683576cb880f416ffeeb9ee43185edd12965474043c1e540f1c.exe windows x86
08965887007901a92af870f4484a261b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
RtlMoveMemory
GetModuleFileNameW
Process32NextW
GetExitCodeThread
GetNumberOfConsoleInputEvents
GetCommandLineW
GetStringTypeExA
GetProfileStringA
GetStringTypeExA
FindFirstVolumeMountPointW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE