Static task
static1
Behavioral task
behavioral1
Sample
77d8f9f13295abd10985e16ba788443fe09305e96a2ab6666189edf2b955cbea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
77d8f9f13295abd10985e16ba788443fe09305e96a2ab6666189edf2b955cbea.exe
Resource
win10v2004-20220812-en
General
-
Target
77d8f9f13295abd10985e16ba788443fe09305e96a2ab6666189edf2b955cbea
-
Size
72KB
-
MD5
0f02444b164cbb52a1da809d343475b1
-
SHA1
e784de9c13e3653c7df64611a8b70c3a3795854c
-
SHA256
77d8f9f13295abd10985e16ba788443fe09305e96a2ab6666189edf2b955cbea
-
SHA512
af4d8bb44ea956d01ddca448725dd356c366f1b8d37aa9ddc53a7338765ae274ad8450d4adb1830c622ea0942fa4a485708b765bea824ed8338ebec271770736
-
SSDEEP
384:EyxeZ+95E8YqsMTJZ+J1xq3UZU9w1xq3UZU92pBjQh:EWWcE8Y/kOBZU9qZU9wjw
Malware Config
Signatures
Files
-
77d8f9f13295abd10985e16ba788443fe09305e96a2ab6666189edf2b955cbea.exe windows x86
7955603d16f8d1393ee2dbc27446a075
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comn
GetObjectLog
kernel32
Sleep
CloseHandle
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
user32
LoadCursorW
BeginPaint
EndPaint
EndDialog
KillTimer
PostQuitMessage
SetTimer
LoadStringW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
ws2_32
socket
htons
closesocket
WSACleanup
inet_addr
connect
send
WSAStartup
msvcr80
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
memset
strrchr
sprintf
_wcsnicmp
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ