Static task
static1
Behavioral task
behavioral1
Sample
1d77b7e3eb19239c187a3d5a85f7f8abff5febb5ebe5755145baeaa75b755726.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1d77b7e3eb19239c187a3d5a85f7f8abff5febb5ebe5755145baeaa75b755726.exe
Resource
win10v2004-20221111-en
General
-
Target
1d77b7e3eb19239c187a3d5a85f7f8abff5febb5ebe5755145baeaa75b755726
-
Size
498KB
-
MD5
10236d9964c7f04e637a92f128236cc0
-
SHA1
fac02adad63a10b9245d0150b473a7d9c32d032b
-
SHA256
1d77b7e3eb19239c187a3d5a85f7f8abff5febb5ebe5755145baeaa75b755726
-
SHA512
63c7606df9787c7cbea94a63ad592e759edff74157786983465ee303514c2d9240c8f44735333811d32b42525ac62a0401831b0d0647edb82810a001531db757
-
SSDEEP
12288:DTjxRVMPVKXSvJaYgl9aeUtU37i1rFgydh4JHxL:DTVvMPVooWa6i1rJdhkHxL
Malware Config
Signatures
Files
-
1d77b7e3eb19239c187a3d5a85f7f8abff5febb5ebe5755145baeaa75b755726.exe windows x86
425b5a06ae7a53540f036ece4f1f9054
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
PrivilegedServiceAuditAlarmA
ntdll
RtlRestoreLastWin32Error
user32
GetKBCodePage
DefMDIChildProcA
kernel32
GetUserDefaultLangID
Sections
.text Size: 491KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 135B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE