Static task
static1
Behavioral task
behavioral1
Sample
a78d517b2435fab832dc8c09970fd77c2336407f29684a3e27e3e3a08d463861.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a78d517b2435fab832dc8c09970fd77c2336407f29684a3e27e3e3a08d463861.exe
Resource
win10v2004-20220812-en
General
-
Target
a78d517b2435fab832dc8c09970fd77c2336407f29684a3e27e3e3a08d463861
-
Size
325KB
-
MD5
b17b7e4291b65141a39276757a691293
-
SHA1
b183be51513256d11bab2bad7f05b9a33224f1fc
-
SHA256
a78d517b2435fab832dc8c09970fd77c2336407f29684a3e27e3e3a08d463861
-
SHA512
3dc37cc397cd988a6a90845e6f7839de7e67011fb30e1e85075c141347d1e35fc4200d32f03e83c5eb1f6ae5a3bf5f252cdbbaf7ab889059c26feb3449a08838
-
SSDEEP
6144:3gpd5NG3XXnRI2RZfdM5rkVYIWNJnXyEtBfCvoK8CUmt6CAWctDpv:3gP/IXRIGdMNkiIEJnXWzbUVtWctDpv
Malware Config
Signatures
Files
-
a78d517b2435fab832dc8c09970fd77c2336407f29684a3e27e3e3a08d463861.exe windows x86
cbea90da7f463157ac55686475029e73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetExitCodeProcess
GetTickCount
SetLastError
CreateThread
GetDiskFreeSpaceW
CreateFileA
GetModuleHandleA
GetFileAttributesA
LoadLibraryW
FindAtomA
ResetEvent
HeapCreate
GetComputerNameA
TlsGetValue
GetSystemTime
SetEvent
SuspendThread
GetCommandLineW
CloseHandle
advapi32
RegDeleteKeyA
RegCloseKey
IsTokenRestricted
RegEnumKeyExA
CredFree
CloseEventLog
RegQueryValueA
GetFileSecurityA
GetUserNameW
RegCreateKeyExA
CreateServiceW
RegEnumValueA
GetLengthSid
cryptui
WizardFree
LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ