Static task
static1
Behavioral task
behavioral1
Sample
977378d6e98b54b621039096b96a33e1d9c86fc0d90dca9eb1728d39b1944353.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
977378d6e98b54b621039096b96a33e1d9c86fc0d90dca9eb1728d39b1944353.exe
Resource
win10v2004-20221111-en
General
-
Target
977378d6e98b54b621039096b96a33e1d9c86fc0d90dca9eb1728d39b1944353
-
Size
134KB
-
MD5
01ac5e13d20a8ae07b13daba22ec16c0
-
SHA1
7c76a155d93c561d88e350557702877d88e6fed5
-
SHA256
977378d6e98b54b621039096b96a33e1d9c86fc0d90dca9eb1728d39b1944353
-
SHA512
cd6b98abf86cb0a9e9f186a97b4e071b53b3ba8ed051efa8edc27c3cdc23b898a27462e20938e195161bfc64b47b55338041fe7eb9abb3bd7cbf87048f12c120
-
SSDEEP
1536:joB/76PoN7/vzVt/+hRFgjXRUxAnQVJHgKdRz+aG7IX8mXjY7nTW1DsflYp8nxiB:spPptUYXwAZ0qU5XecsCpexqNTqnWe/
Malware Config
Signatures
Files
-
977378d6e98b54b621039096b96a33e1d9c86fc0d90dca9eb1728d39b1944353.exe windows x86
31ea0af0355be10a85ab0d45b89fa949
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetProcessVersion
lstrcpyA
CreateIoCompletionPort
FindFirstVolumeMountPointW
TlsGetValue
UpdateResourceA
SetLocalTime
WriteFileEx
CreateDirectoryW
GetPrivateProfileStructA
WaitCommEvent
GetDiskFreeSpaceExW
FindClose
SetProcessWorkingSetSize
SetSystemTime
GetBinaryTypeW
GetWriteWatch
LocalFlags
CreateSemaphoreW
PostQueuedCompletionStatus
CompareStringW
SizeofResource
GetCalendarInfoA
OpenEventW
ChangeTimerQueueTimer
CreateEventA
GlobalUnWire
CreateMutexW
GetThreadSelectorEntry
WaitForMultipleObjects
GetCurrencyFormatA
CreateMailslotW
IsSystemResumeAutomatic
GetSystemInfo
SwitchToThread
OutputDebugStringW
user32
DefWindowProcW
ExcludeUpdateRgn
ChildWindowFromPoint
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE