Static task
static1
Behavioral task
behavioral1
Sample
477b77b0f9e1bae5995f87015c25a3b0237b1eda7d82511fc497189926e10803.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
477b77b0f9e1bae5995f87015c25a3b0237b1eda7d82511fc497189926e10803.exe
Resource
win10v2004-20221111-en
General
-
Target
477b77b0f9e1bae5995f87015c25a3b0237b1eda7d82511fc497189926e10803
-
Size
58KB
-
MD5
cc7be8c4511679d8de14f10acca1b870
-
SHA1
ab87e9be9785437e3775bf1a9bbace52e679c617
-
SHA256
477b77b0f9e1bae5995f87015c25a3b0237b1eda7d82511fc497189926e10803
-
SHA512
f2600ac1ff5323a09f3f58fddacddc328ebc23bb833e47a3c14a6841a5894f1d9fd54e9b181bfbd7412d1d685b914de3da9c7c59f53cfd8b301378236c97789b
-
SSDEEP
1536:Y3+drw8MY8GgOg9Pw/f9lP3VPGsos18A:YCrw1rDdw39lPh1o4
Malware Config
Signatures
Files
-
477b77b0f9e1bae5995f87015c25a3b0237b1eda7d82511fc497189926e10803.exe windows x86
3c932230d46dbf1819aa256573c0b4cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
TlsSetValue
GetFileSize
GetVersionExA
SetFilePointer
MoveFileA
FindResourceA
LockFile
GetEnvironmentStringsW
InterlockedExchange
GetVersionExW
GetProcAddress
LockFileEx
LoadLibraryA
HeapSize
GlobalFree
GetCurrentThread
WaitForMultipleObjectsEx
ReleaseMutex
GetTickCount
GetProcessTimes
IsBadWritePtr
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStringTypeW
GetStdHandle
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
user32
RegisterClassW
ReleaseDC
CharLowerW
LoadKeyboardLayoutW
LoadMenuA
SetMenuDefaultItem
GetMenu
DrawTextExA
ShowScrollBar
SetScrollInfo
GetComboBoxInfo
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ