Static task
static1
Behavioral task
behavioral1
Sample
77d95a7ac9f56a17711798276c3ae8cfff1387548e9144c05c61334af9b2a53a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77d95a7ac9f56a17711798276c3ae8cfff1387548e9144c05c61334af9b2a53a.exe
Resource
win10v2004-20220812-en
General
-
Target
77d95a7ac9f56a17711798276c3ae8cfff1387548e9144c05c61334af9b2a53a
-
Size
444KB
-
MD5
d148b793dbda7320c2edb6d8d2383285
-
SHA1
cfdd6ead1dacb9ecdcff1193faac3f80732d759b
-
SHA256
77d95a7ac9f56a17711798276c3ae8cfff1387548e9144c05c61334af9b2a53a
-
SHA512
7365c863ec2e3cbea3f9c3a332224bc5022cb383b48284c0748ece24ef4567bd8aa679b8b2050e9a594c5012b264b4df59d15065b04c7c70051e749b0e63b890
-
SSDEEP
6144:4KY/TUjELIaWG62gAoDNW/sYbLNTIldLN457Y+KI5iXJixgjsotcB7C4:4KY/TjWcTb5AxY7tgj/ar
Malware Config
Signatures
Files
-
77d95a7ac9f56a17711798276c3ae8cfff1387548e9144c05c61334af9b2a53a.exe windows x86
c9c2057be8b0dd65f122e2330167b667
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
inproc
ord2
hook
ord2
winmm
timeSetEvent
mfc42
ord3874
msvcrt
_CxxThrowException
kernel32
GlobalFree
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
FrameRect
MessageBoxA
gdi32
PtVisible
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
comctl32
ImageList_SetBkColor
ole32
CoInitialize
winio
ShutdownWinIo
bexception
ord1
msvcirt
??0exception@@QAE@ABQBD@Z
olepro32
ord251
Sections
.text Size: - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 430KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.speed0 Size: - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.speed1 Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ