Static task
static1
Behavioral task
behavioral1
Sample
766c75d83051b62f4b7bbe49c74bb08ac19613dbf9b8eda12ac04674d4e92fe3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
766c75d83051b62f4b7bbe49c74bb08ac19613dbf9b8eda12ac04674d4e92fe3.exe
Resource
win10v2004-20220901-en
General
-
Target
766c75d83051b62f4b7bbe49c74bb08ac19613dbf9b8eda12ac04674d4e92fe3
-
Size
440KB
-
MD5
c79d575bfb840ff63d98623736f22bb5
-
SHA1
ef43bcaf324a65805b8980ed54b26bf7bcc71e16
-
SHA256
766c75d83051b62f4b7bbe49c74bb08ac19613dbf9b8eda12ac04674d4e92fe3
-
SHA512
b36e7f934f8c74711e6118f555e7763437795a25352f316f5d87b3e28910dca1466416ee90f7a4cc8c0a2de8c50a1d4acfeb83072b2e0006d1991bccc5286ae5
-
SSDEEP
12288:gF+mfdRhUoXIuBiz/yMWY8nY62EtjP64:C+oXPIuBq6ffYfwjP
Malware Config
Signatures
Files
-
766c75d83051b62f4b7bbe49c74bb08ac19613dbf9b8eda12ac04674d4e92fe3.exe windows x86
bf49959e373e261491653c029a4a2fa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
GetTimeFormatW
WriteConsoleA
GetCommandLineA
GetCommandLineA
HeapDestroy
GetConsoleTitleA
SetLastError
CreateEventW
GlobalFlags
GetDriveTypeW
DeleteFileA
HeapCreate
GetEnvironmentVariableA
GetStartupInfoA
CloseHandle
GetFileAttributesW
GetModuleHandleA
EnumResourceTypesA
advapi32
InitializeSid
IsValidSid
CreateProcessAsUserW
IsValidAcl
IsValidSid
IsValidSid
RegEnumKeyA
IsValidSid
IsValidSecurityDescriptor
RegCreateKeyExW
IsValidSid
RegQueryValueW
RegDeleteValueA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 433KB - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ