Static task
static1
Behavioral task
behavioral1
Sample
78b27899e62b5910104d9c80b016736a3ae210b6be7e80daacf69b408ee9d913.exe
Resource
win10-20220414-en
General
-
Target
78b27899e62b5910104d9c80b016736a3ae210b6be7e80daacf69b408ee9d913
-
Size
745KB
-
MD5
4e42432eb9f22bbb32ffb678d83d28e8
-
SHA1
b82054919c96ecec758471d6b2de6078561c52bb
-
SHA256
78b27899e62b5910104d9c80b016736a3ae210b6be7e80daacf69b408ee9d913
-
SHA512
4a70fedcf8ddbaf5b54f16d55e4e284a8883a1a15c55a604efc1100c5d709a3a340253e2e8161fae7b24e62fdb16cb7e4c80aac0922b12ced6cd49aff98addf1
-
SSDEEP
12288:Op+CQS1ugnAr4pnQ22bLXG1yg0tgmC4KCMyP2uW+klmPEPzJ5J0:Op+CQS1uaQ4ZygOgmC4f0mPEPHJ0
Malware Config
Signatures
Files
-
78b27899e62b5910104d9c80b016736a3ae210b6be7e80daacf69b408ee9d913.exe windows x86
d63e920222aab555f1e4385b502e5927
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
api-ms-win-core-errorhandling-l1-1-0
GetLastError
SetLastError
SetUnhandledExceptionFilter
RaiseException
UnhandledExceptionFilter
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureStackBackTrace
RtlUnwind
api-ms-win-core-processthreads-l1-1-0
ExitProcess
ResumeThread
ExitThread
GetCurrentThread
GetExitCodeThread
GetCurrentThreadId
FlushProcessWriteBuffers
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentProcess
TerminateProcess
SwitchToThread
GetStartupInfoW
GetCurrentProcessId
CreateThread
api-ms-win-core-processthreads-l1-1-1
GetCurrentProcessorNumber
IsProcessorFeaturePresent
api-ms-win-core-threadpool-l1-2-0
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolWork
CloseThreadpoolWait
SubmitThreadpoolWork
SetThreadpoolWait
CreateThreadpoolWait
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
WaitForThreadpoolTimerCallbacks
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibraryAndExitThread
GetProcAddress
GetModuleHandleExW
FreeLibrary
api-ms-win-core-synch-l1-2-0
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitOnceExecuteOnce
Sleep
InitializeConditionVariable
api-ms-win-core-localization-l1-2-0
GetLocaleInfoEx
GetLocaleInfoW
EnumSystemLocalesW
GetCPInfo
IsValidLocale
GetUserDefaultLCID
LCMapStringW
IsValidCodePage
GetACP
LCMapStringEx
FormatMessageA
GetOEMCP
api-ms-win-core-synch-l1-1-0
SetEvent
CreateEventExW
EnterCriticalSection
ResetEvent
CreateEventW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
CreateSemaphoreExW
InitializeSRWLock
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
api-ms-win-core-file-l1-1-0
FindFirstFileExW
GetFileSizeEx
CreateFileW
ReadFile
FindClose
SetFilePointerEx
WriteFile
FlushFileBuffers
SetFileInformationByHandle
FindNextFileW
GetFileType
api-ms-win-core-fibers-l1-1-0
FlsFree
FlsGetValue
FlsSetValue
FlsAlloc
api-ms-win-core-sysinfo-l1-1-0
GetTickCount64
GetSystemTimeAsFileTime
api-ms-win-core-file-l2-1-0
GetFileInformationByHandleEx
CreateSymbolicLinkW
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-string-l1-1-0
GetStringTypeW
CompareStringEx
CompareStringW
WideCharToMultiByte
MultiByteToWideChar
user32
PostQuitMessage
DefWindowProcW
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
OutputDebugStringW
api-ms-win-core-interlocked-l1-1-0
InterlockedPushEntrySList
InitializeSListHead
InterlockedFlushSList
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineA
GetCommandLineW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetEnvironmentStringsW
SetStdHandle
GetStdHandle
api-ms-win-core-console-l1-1-0
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
SetConsoleCtrlHandler
ReadConsoleW
api-ms-win-core-heap-l1-1-0
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-timezone-l1-1-0
GetTimeZoneInformation
Sections
.text Size: 507KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ