Static task
static1
Behavioral task
behavioral1
Sample
a774805d8769f72463944888d87cf43a6a996018376ba331b954e6524c990c27.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a774805d8769f72463944888d87cf43a6a996018376ba331b954e6524c990c27.exe
Resource
win10v2004-20221111-en
General
-
Target
a774805d8769f72463944888d87cf43a6a996018376ba331b954e6524c990c27
-
Size
76KB
-
MD5
061516393ccc075d26d356ee6cbd70e3
-
SHA1
283f0274d491b00be1c5836b8d360fdd8c69944f
-
SHA256
a774805d8769f72463944888d87cf43a6a996018376ba331b954e6524c990c27
-
SHA512
33357f6583956400814d1844698d84aec671830fcf8ef6af7732efdd1730cd5b9e90b9d062cd2eae4a8a42a686bc77b0c1fe6ddee34b4dda2d90b614598ff618
-
SSDEEP
1536:AiDrOBnjb+ULQM38CWKUBq7Em882hW8fPL9:tDqFvN33QKUB0ED8vYL9
Malware Config
Signatures
Files
-
a774805d8769f72463944888d87cf43a6a996018376ba331b954e6524c990c27.exe windows x86
a1050252247b8998a77befd55d04ce85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerifyVersionInfoA
CloseProfileUserMapping
EnumResourceNamesA
GetStringTypeExW
EraseTape
RtlUnwind
GetComPlusPackageInstallStatus
CheckNameLegalDOS8Dot3A
VDMOperationStarted
GetVolumeNameForVolumeMountPointW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE