Static task
static1
Behavioral task
behavioral1
Sample
770f4b14ad29c03e6e84fb47ae83b4915c6ddb7ddbe3f300ad60416003d089c8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
770f4b14ad29c03e6e84fb47ae83b4915c6ddb7ddbe3f300ad60416003d089c8.exe
Resource
win10v2004-20220812-en
General
-
Target
770f4b14ad29c03e6e84fb47ae83b4915c6ddb7ddbe3f300ad60416003d089c8
-
Size
41KB
-
MD5
0c1e6f6fe5af9ae4afb3b0ca907e6360
-
SHA1
77fb0f0b20efee84a1cb171fcf1e958c9b05c0cb
-
SHA256
770f4b14ad29c03e6e84fb47ae83b4915c6ddb7ddbe3f300ad60416003d089c8
-
SHA512
0d4fcee68568af848f4236cdcfe5d699b22ad22a1e17540c42fe924c0fd4df664bc92e5196db53b3d737f0cf45cc962fd38cacbbb8a6410e35a85582b41a71b5
-
SSDEEP
768:NbYbK0Ms3X0HBfCAzQ0kPiCAa93jK/yc86uHV5BD4eNVuKG32Tk4pHAi8Xqj/V:IMs3AgccKQ64nBDNNVo0kc1LV
Malware Config
Signatures
Files
-
770f4b14ad29c03e6e84fb47ae83b4915c6ddb7ddbe3f300ad60416003d089c8.exe windows x86
384460cb29f87431d38022ca83ad62ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
OpenProcess
DuplicateHandle
SetEvent
GetCurrentProcessId
LocalReAlloc
CloseHandle
CreateEventA
lstrcmpiA
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetModuleFileNameA
lstrlenA
LocalAlloc
GetLastError
LocalFree
InterlockedDecrement
InterlockedIncrement
ResumeThread
CreateThread
user32
PostThreadMessageA
GetMessageA
CharNextA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
ole32
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE