Static task
static1
Behavioral task
behavioral1
Sample
ac77090ead18216f5388be419a923fa4b785ce6fd4cb8aa86ecf479b08dcefe2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac77090ead18216f5388be419a923fa4b785ce6fd4cb8aa86ecf479b08dcefe2.exe
Resource
win10v2004-20221111-en
General
-
Target
ac77090ead18216f5388be419a923fa4b785ce6fd4cb8aa86ecf479b08dcefe2
-
Size
76KB
-
MD5
e5ce00cdc00758d0f8921a72571f80b2
-
SHA1
0b7fbafcf4b37053c2c96c1261d01f94ff2e893c
-
SHA256
ac77090ead18216f5388be419a923fa4b785ce6fd4cb8aa86ecf479b08dcefe2
-
SHA512
2d5946febba71bd1c3bfed1329d3e306059229d94bc07fb48f837bdf2d90f6c7a7ad96d734b3f4f33e4f042280fdca6aad4781a26c61e522f99dac38aa47ba27
-
SSDEEP
1536:aD2222u3xP0XJTvHzXFMWahyKr47+bntgypWlgCjm0qRDpjVrs2ryrd1vUQuq6:tp0XhTFMXAKr4antgyAlljVqVHs2qo
Malware Config
Signatures
Files
-
ac77090ead18216f5388be419a923fa4b785ce6fd4cb8aa86ecf479b08dcefe2.exe windows x86
23ad33f181e17cb82a4d97148dbb5c9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExW
SetConsoleScreenBufferSize
Process32NextW
GetNumaHighestNodeNumber
GetProcessId
DebugActiveProcessStop
EnumLanguageGroupLocalesA
CreateProcessInternalW
GetStartupInfoW
BaseCheckAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE