Static task
static1
Behavioral task
behavioral1
Sample
777b1fbf2c11a7d2cdf568a046013ba48861d72509c0b5c2b4229876d157c460.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
777b1fbf2c11a7d2cdf568a046013ba48861d72509c0b5c2b4229876d157c460.exe
Resource
win10v2004-20220901-en
General
-
Target
777b1fbf2c11a7d2cdf568a046013ba48861d72509c0b5c2b4229876d157c460
-
Size
312KB
-
MD5
0a33e3ec86182bfebdd195645ae51b8e
-
SHA1
643dd3166cfbea0ea651e8ced851c58e8f9a939f
-
SHA256
777b1fbf2c11a7d2cdf568a046013ba48861d72509c0b5c2b4229876d157c460
-
SHA512
cb01901ee294dfcd04f6bd916024d9e97391066ba85c5917a6cbbc1129ce5b44d2da737602c1af7ee0ee9dbc0850b50a8ad65ab9b0f2cabe22b13db981d14e3b
-
SSDEEP
6144:O4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:O4tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
777b1fbf2c11a7d2cdf568a046013ba48861d72509c0b5c2b4229876d157c460.exe windows x86
92e5a5fabe939686f31e4db77cb73fc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
VirtualProtect
GetACP
IsDebuggerPresent
GetExpandedNameA
GetThreadPriority
GetModuleHandleA
GetCompressedFileSizeA
FlushFileBuffers
GetStdHandle
GetCurrentProcess
FindAtomA
OpenSemaphoreA
WriteConsoleA
GetCurrentProcessId
GetEnvironmentStringsA
GetCurrentThread
GetSystemDirectoryA
HeapCreate
GlobalFree
InterlockedExchange
user32
FillRect
GetCursorPos
FrameRect
ReleaseDC
DrawTextA
ValidateRgn
GetDlgItem
BeginPaint
wsprintfA
GetWindowTextLengthA
SetActiveWindow
ShowWindow
GetParent
IsIconic
SetForegroundWindow
EndPaint
GetWindow
GetClassNameA
GetFocus
linkinfo
DestroyLinkInfo
GetCanonicalPathInfoA
ResolveLinkInfoA
GetLinkInfoData
IsValidLinkInfo
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ