Static task
static1
Behavioral task
behavioral1
Sample
77ca0dd338fe9015b465227d04ac8afd00177b7bea563c6dc5af4554be016e34.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77ca0dd338fe9015b465227d04ac8afd00177b7bea563c6dc5af4554be016e34.exe
Resource
win10v2004-20220812-en
General
-
Target
77ca0dd338fe9015b465227d04ac8afd00177b7bea563c6dc5af4554be016e34
-
Size
27KB
-
MD5
0e52d32744323999398d6435f0fd6710
-
SHA1
a07067a6af762ce41942617de97de021bea3a419
-
SHA256
77ca0dd338fe9015b465227d04ac8afd00177b7bea563c6dc5af4554be016e34
-
SHA512
1db365acba41feef06425e4a20e80e3cb8e4df00a8117bbac87196a38ba2dedd453efb1dbd8b9a58979e8f42c9a1983203bbfa5d8a5cf1241da13e34b1fe11d7
-
SSDEEP
384:72OrHL2SCW+e04QewfqyqoZa9FbY3+EDuj9IUJ/hWSkJIUzTMIf:S+00Oo5iuTfk2Uz
Malware Config
Signatures
Files
-
77ca0dd338fe9015b465227d04ac8afd00177b7bea563c6dc5af4554be016e34.exe windows x86
8210e24b67a19bff73ec09f383e2c401
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_strnicmp
_wcsnicmp
wcslen
strncmp
MmGetSystemRoutineAddress
RtlInitUnicodeString
wcscat
wcscpy
swprintf
MmIsAddressValid
_except_handler3
ExFreePool
_snprintf
ExAllocatePoolWithTag
RtlCopyUnicodeString
ObfDereferenceObject
strncpy
_stricmp
IofCompleteRequest
RtlAnsiStringToUnicodeString
ZwClose
ZwQueryValueKey
ZwOpenKey
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 896B - Virtual size: 892B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ