Static task
static1
Behavioral task
behavioral1
Sample
dc77e61c7ed2846d83cbf45871c496ca153757590086ef14a30efd567841abac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc77e61c7ed2846d83cbf45871c496ca153757590086ef14a30efd567841abac.exe
Resource
win10v2004-20220901-en
General
-
Target
dc77e61c7ed2846d83cbf45871c496ca153757590086ef14a30efd567841abac
-
Size
769KB
-
MD5
7c7206305a33cc3e2955e6bc3d0c90f2
-
SHA1
8b2b6d87e40927f0cb06bae3637b455dedab9e59
-
SHA256
dc77e61c7ed2846d83cbf45871c496ca153757590086ef14a30efd567841abac
-
SHA512
bc070f6edc069c8f7e4cb96794677f35de3439db30d1a0f1c7482debd98adecaabaaaf7786029eeda5d94a05c813791cb18c6cae7546d6043f77a7108f995563
-
SSDEEP
12288:KkWjlIas4D8KQVkbbxB6XBPlCzjgF4OIqjzYjcpRpMMHdz28UD6ySMUNG:KjlLCaUXB9Czj+4cjB28sUN
Malware Config
Signatures
Files
-
dc77e61c7ed2846d83cbf45871c496ca153757590086ef14a30efd567841abac.exe windows x86
76f9b2fd40dae0202235ba858e03b6ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryW
GetCommandLineW
ReleaseSemaphore
RemoveDirectoryW
DeleteFileA
ResetEvent
VirtualProtectEx
SetStdHandle
Sleep
CreateFileMappingW
CreateDirectoryW
OpenEventW
GetModuleHandleA
CloseHandle
WriteFile
HeapSize
lstrlenA
WriteConsoleW
GetDriveTypeA
ReleaseMutex
CreateMutexA
CloseHandle
CreateFileA
GetFileSize
GetVersion
user32
DestroyMenu
IsZoomed
GetSysColor
DrawTextW
DestroyMenu
PeekMessageA
IsWindow
GetWindowLongA
MessageBoxA
GetClassInfoA
DispatchMessageA
FindWindowA
CreateIcon
efsadu
EfsDetail
EfsDetail
EfsDetail
EfsDetail
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ