Static task
static1
Behavioral task
behavioral1
Sample
76Ʊķ.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76Ʊķ.exe
Resource
win10v2004-20221111-en
General
-
Target
11522acc832bb7b5fe11d89fadcce99ae61296ea69ccc20415bab215213dfd3d
-
Size
2.3MB
-
MD5
f26fcdd7683d51c4bdb091aa8f6d08f0
-
SHA1
5e52813c8a487ff2711391cbce0d18716ab64019
-
SHA256
11522acc832bb7b5fe11d89fadcce99ae61296ea69ccc20415bab215213dfd3d
-
SHA512
473bc9cdd61acf307956d9c98faac35304bc9347f9633c86c0dda7485ae97b076d3553cd7b1c3194986747edcf4788e4d5ed901f277f08625e59266181417f8d
-
SSDEEP
49152:Fj4Tg7voKXwYw9ePAj3rCZXU1HvpOILFjzSTiGOwNrbD13HL:FjfwrVrrp1PLFLGVNB3HL
Malware Config
Signatures
Files
-
11522acc832bb7b5fe11d89fadcce99ae61296ea69ccc20415bab215213dfd3d.zip
-
76Ʊķ.exe.exe windows x86
4b70856121192adb83b591dde821d383
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
connect
rasapi32
RasHangUpA
kernel32
MultiByteToWideChar
user32
PostQuitMessage
gdi32
GetViewportExtEx
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
StgOpenStorageOnILockBytes
oleaut32
VariantChangeType
comctl32
ImageList_Draw
oledlg
ord8
wininet
InternetCanonicalizeUrlA
wldap32
ord29
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ