Behavioral task
behavioral1
Sample
76d521f0278a2c92d16d4e02bbb5e7ccc2140468c95c7e8ef7026151ce7a29ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76d521f0278a2c92d16d4e02bbb5e7ccc2140468c95c7e8ef7026151ce7a29ab.exe
Resource
win10v2004-20220901-en
General
-
Target
76d521f0278a2c92d16d4e02bbb5e7ccc2140468c95c7e8ef7026151ce7a29ab
-
Size
204KB
-
MD5
6cda0610a182d137fb37d73ef63b7bbe
-
SHA1
5771183ee24742584b061b247d624bbcb7f274e7
-
SHA256
76d521f0278a2c92d16d4e02bbb5e7ccc2140468c95c7e8ef7026151ce7a29ab
-
SHA512
ea09eb3edbd3c0fa77a9cf3b2833e96b67afb36ebb056a57556785334bfa671e7a3eb564acaf526d556e563ccb7d733d1bbc168e80e79ce1a810331d148ad686
-
SSDEEP
3072:rGWs2oL7TAQbs1xE4dfzh35FCX+pXgOoWc6SL96+hv7y9o9:rGxp7TXZ4dV6OpXgETSk+hv
Malware Config
Signatures
-
Guloader family
Files
-
76d521f0278a2c92d16d4e02bbb5e7ccc2140468c95c7e8ef7026151ce7a29ab.exe windows x86
534d649be24a793d745f92c17070bfcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LoadLibraryA
CreateFileA
ReadFile
VirtualAlloc
GetFileSize
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mlwr Size: 156KB - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE