Static task
static1
Behavioral task
behavioral1
Sample
a0a77dddf87a6501cc276607cbaf54dec8d8f141c034b7a3bad5b77b0a85c818.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0a77dddf87a6501cc276607cbaf54dec8d8f141c034b7a3bad5b77b0a85c818.exe
Resource
win10v2004-20221111-en
General
-
Target
a0a77dddf87a6501cc276607cbaf54dec8d8f141c034b7a3bad5b77b0a85c818
-
Size
102KB
-
MD5
5bbf0c1c27fd3c5a8fc5b26531905cf3
-
SHA1
867921eea5ecf8edadd8dba41891ee918f67c870
-
SHA256
a0a77dddf87a6501cc276607cbaf54dec8d8f141c034b7a3bad5b77b0a85c818
-
SHA512
1c62b8f609c4ac48fb66d036726fa2dfa0ddabc319ab9319828078a314907c6defdd7e01168f497231a6fd68c6b419ebd5b571945b6a0c28ffbe7c0bf2d3993a
-
SSDEEP
3072:/zA41C6IStNwBcYrsU98UsLkrcaIwfqvolUzygR29:/tCJSYBcYrH9RsQq9olT9
Malware Config
Signatures
Files
-
a0a77dddf87a6501cc276607cbaf54dec8d8f141c034b7a3bad5b77b0a85c818.exe windows x86
1ea536f5c395ba9ece3490a2c32cfabe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cmdial32
AutoDialFunc
adsnt
DllGetClassObject
kernel32
SetConsoleCtrlHandler
TlsAlloc
GetOEMCP
GetCurrentThreadId
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualAlloc
LoadLibraryExA
GetLastError
LCMapStringA
LoadResource
VirtualFree
GetModuleHandleA
GetModuleFileNameA
HeapReAlloc
IsDBCSLeadByte
GetCurrentProcess
WriteFile
GetACP
GetEnvironmentStrings
lstrcmpiA
GetCommandLineA
InterlockedIncrement
TlsFree
SizeofResource
HeapAlloc
DisableThreadLibraryCalls
DeleteCriticalSection
lstrcpynA
GetProcAddress
InterlockedDecrement
GetStringTypeW
HeapFree
GetShortPathNameA
lstrlenA
GetStartupInfoA
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
SetLastError
lstrcatA
GetCurrentThread
TlsGetValue
TlsSetValue
LCMapStringW
GetStdHandle
HeapDestroy
IsBadWritePtr
GetStringTypeA
GetVersion
WideCharToMultiByte
IsBadReadPtr
lstrcpyA
MultiByteToWideChar
LoadLibraryA
IsBadCodePtr
HeapCreate
SetHandleCount
InitializeCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
ExitProcess
RtlUnwind
GetCPInfo
lstrlenW
GetFileType
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindResourceA
FatalAppExitA
dataclen
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ziakyom Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE