Static task
static1
Behavioral task
behavioral1
Sample
76a64fca76b423545b16ff5b708c89453b89d222238abf18fd41ec0fec36e6bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
76a64fca76b423545b16ff5b708c89453b89d222238abf18fd41ec0fec36e6bb.exe
Resource
win10v2004-20220812-en
General
-
Target
76a64fca76b423545b16ff5b708c89453b89d222238abf18fd41ec0fec36e6bb
-
Size
36KB
-
MD5
5b66f3e348cf80294819ccebc7207778
-
SHA1
9cc2e3576047e962002d2dcfcf926baac9c82032
-
SHA256
76a64fca76b423545b16ff5b708c89453b89d222238abf18fd41ec0fec36e6bb
-
SHA512
82aac15d09f3f5cfe9d6e27bcebebecd6bb41480159ffd295b23be6b48011950962a55c121505446cb909d2b692563cd7328b67726226eb51be404cc6d3b5bd6
-
SSDEEP
768:hVqL7pJGiYjW2qOUDWOVyeLIKeZ0UlLC6XC8xPgeG9GS:zqnuBCJJz77p6XC8xPgeG9G
Malware Config
Signatures
Files
-
76a64fca76b423545b16ff5b708c89453b89d222238abf18fd41ec0fec36e6bb.exe windows x86
ee5bff62ec6b6e176e73b94c1d36136e
Code Sign
58:b8:64:ef:24:b4:b7:ad:4b:16:c5:96:08:f3:22:8cCertificate
IssuerCN=AwarawNot Before31/12/2010, 21:00Not After31/12/2039, 23:59SubjectCN=Awaraw50:9f:0a:73:8e:56:94:21:3f:b6:c7:cb:45:eb:c0:5c:1d:78:d6:72Signer
Actual PE Digest50:9f:0a:73:8e:56:94:21:3f:b6:c7:cb:45:eb:c0:5c:1d:78:d6:72Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Awaraw01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetVersion
GetWindowsDirectoryA
LoadLibraryA
user32
KillTimer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE