Static task
static1
Behavioral task
behavioral1
Sample
775dd324ab6cfc9e23c51d0289724050d95cbbddfce295ca5d0d95ed0529107f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
775dd324ab6cfc9e23c51d0289724050d95cbbddfce295ca5d0d95ed0529107f.exe
Resource
win10v2004-20221111-en
General
-
Target
775dd324ab6cfc9e23c51d0289724050d95cbbddfce295ca5d0d95ed0529107f
-
Size
110KB
-
MD5
8b3c6167068f07dc1669ced808970cd1
-
SHA1
28775508fff132b75ca297825824243ed60f737e
-
SHA256
775dd324ab6cfc9e23c51d0289724050d95cbbddfce295ca5d0d95ed0529107f
-
SHA512
e2de306bf92e995600feccc75354341fa015f84af3e4c993f4a161365836f946280b2a9171b8ed069963127cd937ace77e1d6bd18b1356a4f0ee671f83f90a70
-
SSDEEP
1536:MqdjHdwl0cHr7XsGePN0YDD9TIFI+v/EDO7sgpImH6EtEDBCYhTg:MyjHSCcL7wmjAGIqTnYBg
Malware Config
Signatures
Files
-
775dd324ab6cfc9e23c51d0289724050d95cbbddfce295ca5d0d95ed0529107f.exe windows x86
b3e83fdd303a3a3a57e3b7a19d96258a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
DeleteFileA
lstrcatA
GetProcAddress
RtlMoveMemory
GetStringTypeW
GetDriveTypeA
LocalFileTimeToFileTime
GetThreadLocale
DeleteFileW
LoadResource
SetUnhandledExceptionFilter
WaitForMultipleObjects
GetCurrentThread
SystemTimeToFileTime
SizeofResource
GetCurrentProcessId
lstrcmpiW
GetConsoleOutputCP
RtlUnwind
GetModuleHandleA
GetEnvironmentStringsW
GetTempPathA
GetSystemTime
FormatMessageA
VirtualProtect
SetFileAttributesW
OpenProcess
InterlockedDecrement
WriteConsoleA
msvcrt
_adjust_fdiv
_exit
__getmainargs
_except_handler3
_initterm
__p__fmode
_XcptFilter
__p___initenv
__p__commode
__set_app_type
_controlfp
tan
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ideteijo Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ