Static task
static1
Behavioral task
behavioral1
Sample
9a88e4c02cb3205593bb6f344ce6628fc86e9370b130371165a59d6cf6891465.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a88e4c02cb3205593bb6f344ce6628fc86e9370b130371165a59d6cf6891465.exe
Resource
win10v2004-20220812-en
General
-
Target
77c0c3e49ad114f40a5ffec63a58b740.bin
-
Size
151KB
-
MD5
6043164989ffcd7beaf1b0ed786070a6
-
SHA1
57798f6c4013b9b811c19af9ccd52500d1197565
-
SHA256
36c2158de281a548c7a4b65374a294763ecfe518316e2b1dee32a3d6349fc1f2
-
SHA512
207bdb4703704733dabdf91701d419981437eef87fa4575efc1b8525d9b133df884acf5ce3b628f2d6bf04af0bde14273e06857e455282402257d2aec531d909
-
SSDEEP
3072:IZjiHCvaEqfinP2tfdcF4xTBNjgxmo1saDTldzjb2EAyLF3igTLRx:IZj08P2tVcF4xT7jgxHZdzj6EAyogTr
Malware Config
Signatures
Files
-
77c0c3e49ad114f40a5ffec63a58b740.bin.zip
Password: infected
-
9a88e4c02cb3205593bb6f344ce6628fc86e9370b130371165a59d6cf6891465.exe.exe windows x86
Password: infected
529ac643cc5d5d995f9d7ad9d0e3505d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowTextW
ShowWindow
TranslateMessage
UpdateWindow
CreateDialogParamA
PostQuitMessage
RegisterClassExW
SendMessageA
SetDlgItemInt
kernel32
VirtualAlloc
AttachConsole
GetStdHandle
CompareStringW
CreateMutexA
AddAtomW
BackupWrite
AddLocalAlternateComputerNameA
AddVectoredExceptionHandler
GetSystemInfo
GetVersionExA
LocalAlloc
AreFileApisANSI
AllocateUserPhysicalPages
BackupSeek
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetFileType
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualQuery
gdi32
GetDeviceCaps
DPtoLP
CreateFontIndirectA
SetBkMode
BitBlt
GetDIBits
CreateCompatibleBitmap
GetRegionData
SetStretchBltMode
SelectObject
CreateCompatibleDC
CreateDIBitmap
StretchBlt
GetObjectA
SelectClipRgn
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE