Static task
static1
Behavioral task
behavioral1
Sample
7a78cf881c989362ab6295a3c0541db99c390e55645b561e724e3e98f5f3f65d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a78cf881c989362ab6295a3c0541db99c390e55645b561e724e3e98f5f3f65d.exe
Resource
win10v2004-20220901-en
General
-
Target
7a78cf881c989362ab6295a3c0541db99c390e55645b561e724e3e98f5f3f65d
-
Size
198KB
-
MD5
3f77950528ef18b31b94ef3fc5a1d91d
-
SHA1
22a2a4687767f576b47111798d4e6f694f66c5b8
-
SHA256
7a78cf881c989362ab6295a3c0541db99c390e55645b561e724e3e98f5f3f65d
-
SHA512
d2fcf0ac2c1e7cc3c70ff5bfbf2b5a70cea1f1d8e5e38b435b1ad2414ba1dfe24c8e9cf4039cefb3f0e8b1e44d2d7de202da7e87f9394cfcec18298e00a0104c
-
SSDEEP
3072:6E5+Ma6wAO3agOt5zQU4nzXZJDK64QueA84XGBB256pR6nBVmcwqdaS6WALElmSG:h86aag0b4zD3AjXGoC+8saS0glm
Malware Config
Signatures
Files
-
7a78cf881c989362ab6295a3c0541db99c390e55645b561e724e3e98f5f3f65d.exe windows x86
23f4390a1542c6df0c5c85dadb161b66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoW
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
IsValidCodePage
LoadLibraryA
QueryPerformanceCounter
RaiseException
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
lstrcpyA
msvcrt
strstr
wcschr
wcscpy
wscanf
atof
atol
fopen
fwrite
strcat
fseek
strncat
user32
RemoveMenu
MsgWaitForMultipleObjects
InvalidateRect
EnumWindows
DrawIconEx
CheckMenuItem
wsprintfA
IsZoomed
comctl32
ShowHideMenuCtl
InitCommonControls
GetEffectiveClientRect
CreateToolbarEx
CreateStatusWindowA
CreateMappedBitmap
Sections
.text Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ