Static task
static1
Behavioral task
behavioral1
Sample
0077765b796f0f3e4794d6172484edc23dd677df422386fb3dc410ede0219a29.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0077765b796f0f3e4794d6172484edc23dd677df422386fb3dc410ede0219a29.exe
Resource
win10v2004-20220812-en
General
-
Target
0077765b796f0f3e4794d6172484edc23dd677df422386fb3dc410ede0219a29
-
Size
109KB
-
MD5
ead04b17e72de53e4c431b77c8f8754f
-
SHA1
021f7ed44a9417c964b54c20b5bff9a6289c3b4c
-
SHA256
0077765b796f0f3e4794d6172484edc23dd677df422386fb3dc410ede0219a29
-
SHA512
232a27f6c3d41b26fcc91d772239fb1f0376f5572ede9c2967d37dfa89fd7508b38865fc296067e54e6e1f48791505e1372b054dfb2dbf69fe3c895a9dbee1e9
-
SSDEEP
1536:NMYMzOy12osQJbNxXaT1Z4PRJmuy41IZP441IZPxOEDOfR:NMrOYIcMRI+P4I+PxTqp
Malware Config
Signatures
Files
-
0077765b796f0f3e4794d6172484edc23dd677df422386fb3dc410ede0219a29.exe windows x86
0f4646b928763364fe7e701ca906c82b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
MessageBoxA
GetSystemMetrics
GetDC
GetCursorPos
GetAsyncKeyState
UnhookWindowsHookEx
UnregisterClassW
GetSubMenu
MoveWindow
kernel32
VirtualProtect
VirtualFree
VirtualAlloc
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
SetUnhandledExceptionFilter
GetTempFileNameA
WritePrivateProfileStringW
GlobalAddAtomW
RtlUnwind
gdi32
SetBkColor
GetBkColor
SelectPalette
SetPixel
CreateFontW
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
ole32
CreateILockBytesOnHGlobal
OleGetClipboard
RegisterDragDrop
advapi32
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
comctl32
ImageList_Destroy
ImageList_GetIconSize
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
shell32
ShellExecuteW
ShellExecuteExW
DragFinish
oledlg
OleUIBusyW
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ