Static task
static1
Behavioral task
behavioral1
Sample
759a918097d8b9c2998058004fe252dbb70e5b3751ad252497d646586bbedf86.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
759a918097d8b9c2998058004fe252dbb70e5b3751ad252497d646586bbedf86.exe
Resource
win10v2004-20220812-en
General
-
Target
759a918097d8b9c2998058004fe252dbb70e5b3751ad252497d646586bbedf86
-
Size
58KB
-
MD5
acdf7e5864997053cdcd8a799c2edf18
-
SHA1
9cbe4c699fe685d67d12ae0e73139e6dd779b210
-
SHA256
759a918097d8b9c2998058004fe252dbb70e5b3751ad252497d646586bbedf86
-
SHA512
77d9e74977938bdada30734c03dad58869f1a431ce8d760e8448a4855ca5811f14c9c8494e8c67a08e5d0af27a664e3876210ecc6fe4d6ea5cfdd36447de9451
-
SSDEEP
1536:tGLIT6cQSgG7HJgfFMC/kA7yJVHOo5mmGABTVUB:tGLxfcg93yHOokXoVUB
Malware Config
Signatures
Files
-
759a918097d8b9c2998058004fe252dbb70e5b3751ad252497d646586bbedf86.exe windows x86
9956cc60357f0c1d796990249a6c11b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
ExitThread
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateThread
Sleep
CloseHandle
advapi32
RegEnumValueA
RegCloseKey
RegOpenKeyA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nyotpoc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE