Static task
static1
Behavioral task
behavioral1
Sample
77eeeb4dd5b988ddbe96fe77481b674d333d1dd1e46488fd038c0e5b6a7069fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77eeeb4dd5b988ddbe96fe77481b674d333d1dd1e46488fd038c0e5b6a7069fd.exe
Resource
win10v2004-20220812-en
General
-
Target
77eeeb4dd5b988ddbe96fe77481b674d333d1dd1e46488fd038c0e5b6a7069fd
-
Size
879KB
-
MD5
12a9105d53451bbcd1057a17ae9563ab
-
SHA1
d82b03661aaefa6b0eddb6aafb3212a19f3c8721
-
SHA256
77eeeb4dd5b988ddbe96fe77481b674d333d1dd1e46488fd038c0e5b6a7069fd
-
SHA512
006a782b93a5441afd268886f23e16af0f508131f6937f3c0c7da3afa21a22867da58a6ddc9d1fe077cf0ee3debb7541ca4f2e333fdab8b8d46bd3f7a3ee270f
-
SSDEEP
24576:oJObh6LIo4iKa/p16YsFlPunb8iAnb8gZ2xxVl:oJOwUXfcGvQb7a2xxVl
Malware Config
Signatures
Files
-
77eeeb4dd5b988ddbe96fe77481b674d333d1dd1e46488fd038c0e5b6a7069fd.exe windows x86
77b2deee8f0c4cc27d4e9354da8a7336
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
ntdll
DbgPrint
DbgPrompt
NtPulseEvent
RtlUlonglongByteSwap
atan
kernel32
GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trash Size: 508KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ