Static task
static1
Behavioral task
behavioral1
Sample
77e6badac8818f6390d203bbd95f98e0d27f32cf4065218ffeaa8a9d847a6919.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77e6badac8818f6390d203bbd95f98e0d27f32cf4065218ffeaa8a9d847a6919.exe
Resource
win10v2004-20220812-en
General
-
Target
77e6badac8818f6390d203bbd95f98e0d27f32cf4065218ffeaa8a9d847a6919
-
Size
27KB
-
MD5
6b5d897b2d4de0eb1f4c689a893df192
-
SHA1
2d52c42280dd0fe3e8ee2b5a9ccc983252c6dc8f
-
SHA256
77e6badac8818f6390d203bbd95f98e0d27f32cf4065218ffeaa8a9d847a6919
-
SHA512
19406bfb3314e0f9f2a0359a405a18f326b99a02d71ca409f6677d7b7dd818f55139635d41001b386f15b7c3f381d811bcb1ca499adbca0308a19404305b5878
-
SSDEEP
768:5tc3Jk9Cvamnn8w1CUbba8IJ6nMS2UcoACa0mIpRC6k143:5tSvamnPT+8ln/jcoACa0Zpx2g
Malware Config
Signatures
Files
-
77e6badac8818f6390d203bbd95f98e0d27f32cf4065218ffeaa8a9d847a6919.exe windows x86
902f421786ac05237c88eedc9b0ec4f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
swprintf
RtlInitUnicodeString
_stricmp
strncpy
_wcsnicmp
wcslen
ZwClose
ZwOpenKey
ObfDereferenceObject
wcscat
wcscpy
ExFreePool
_snprintf
ExAllocatePoolWithTag
strncmp
RtlCopyUnicodeString
MmGetSystemRoutineAddress
_strnicmp
RtlAnsiStringToUnicodeString
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 864B - Virtual size: 840B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ