Static task
static1
Behavioral task
behavioral1
Sample
77e2a3e2d0047964482305f87465990f794d668703b4f582c0aa070a4781d551.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77e2a3e2d0047964482305f87465990f794d668703b4f582c0aa070a4781d551.exe
Resource
win10v2004-20220812-en
General
-
Target
77e2a3e2d0047964482305f87465990f794d668703b4f582c0aa070a4781d551
-
Size
103KB
-
MD5
6200f8d75a0ded48fd97c4d697e59aee
-
SHA1
7f7b8b1ea9dce3d2999719f391f95ceecab3c5fd
-
SHA256
77e2a3e2d0047964482305f87465990f794d668703b4f582c0aa070a4781d551
-
SHA512
8cc3775d7515c7163a4ea0b542ab7f2ca1affc0a5c8420dc0c40645ee2e02bd9a757b60ca47f7428cc26b6cdb771a740e98b8bcdac3f7056744ab0cee6160a39
-
SSDEEP
3072:uKS4Mt2vYWhDeQlPn703OSPUHIW606NYot/sLQp:uKAtOYW5fVn703OJf606ttULQp
Malware Config
Signatures
Files
-
77e2a3e2d0047964482305f87465990f794d668703b4f582c0aa070a4781d551.exe windows x86
1574ee4887dd61fd86810508edb41dc3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetStartupInfoA
HeapAlloc
InitializeCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RemoveDirectoryA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
SleepEx
VirtualFree
lstrlenA
user32
CharToOemBuffA
CharUpperBuffA
BeginPaint
CreateAcceleratorTableA
CreateIcon
DispatchMessageA
LoadBitmapA
MessageBoxA
ShowCursor
CharPrevA
advapi32
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegQueryValueA
ole32
OleInitialize
OleGetClipboard
OleLockRunning
GetConvertStg
CreateStreamOnHGlobal
CreateFileMoniker
OleSaveToStream
OleUninitialize
WriteFmtUserTypeStg
OleDuplicateData
CoCreateInstance
CoGetClassObject
CoInitialize
CoUninitialize
wininet
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetSetOptionExA
InternetSetStatusCallbackA
InternetGetCookieA
InternetCrackUrlA
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetConnectA
shell32
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteExA
SHBindToParent
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ