Static task
static1
Behavioral task
behavioral1
Sample
76a40f9afa7acbde7c9c6c8599ad6bd3e62b0d4fbe5355ad7ab19969667466f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76a40f9afa7acbde7c9c6c8599ad6bd3e62b0d4fbe5355ad7ab19969667466f7.exe
Resource
win10v2004-20220812-en
General
-
Target
76a40f9afa7acbde7c9c6c8599ad6bd3e62b0d4fbe5355ad7ab19969667466f7
-
Size
60KB
-
MD5
f9cee2c409d7067e5c801aca959f847b
-
SHA1
6821965aabdd5fce5f79a8b420186ec9f251801d
-
SHA256
76a40f9afa7acbde7c9c6c8599ad6bd3e62b0d4fbe5355ad7ab19969667466f7
-
SHA512
47b1267725f1fa0e3ad35c2a36e16fd21374436e98f06ddabea2a9fdc7195c4b5c68bad1978310cc5077331d8feabaf645589aac95ab012b5795a60be2511476
-
SSDEEP
768:cFnMyZei8zYTpo0dbvmwO2rYP9nFsglQDK+eUIljhTTEUwzMXTF8Ij0O:at98z2pnb2+slQDheHVTlwzPO
Malware Config
Signatures
Files
-
76a40f9afa7acbde7c9c6c8599ad6bd3e62b0d4fbe5355ad7ab19969667466f7.exe windows x86
8181764fab62f3373cd953deec0b9f18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceA
Sleep
CreateProcessA
SizeofResource
ExpandEnvironmentStringsA
GetModuleHandleA
GlobalFree
GlobalAlloc
CreateFileA
DeleteFileA
RemoveDirectoryA
WriteFile
FlushFileBuffers
FreeResource
GetTempFileNameA
CloseHandle
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
SetFilePointer
GetStdHandle
HeapFree
HeapAlloc
WideCharToMultiByte
GetProcAddress
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
GetSystemInfo
advapi32
CreateServiceA
OpenServiceA
CloseServiceHandle
ControlService
DeleteService
StartServiceA
OpenSCManagerA
ws2_32
gethostname
gethostbyname
inet_ntoa
WSACleanup
WSAStartup
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ