Static task
static1
Behavioral task
behavioral1
Sample
78627a47efe229c997215527333b43445e5d4542946a11059c5adf4d34adebde.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
78627a47efe229c997215527333b43445e5d4542946a11059c5adf4d34adebde.exe
Resource
win10v2004-20220812-en
General
-
Target
78627a47efe229c997215527333b43445e5d4542946a11059c5adf4d34adebde
-
Size
359KB
-
MD5
4a21b72794e959257be574667a4bc36d
-
SHA1
d289f405744ce588c846a8a5f992b1d8e660c04f
-
SHA256
78627a47efe229c997215527333b43445e5d4542946a11059c5adf4d34adebde
-
SHA512
1f3bba518c91193a6ac876c2a11c7fdfdddc398fc05122c08c1c66864e9a12546be59bfe083157d5158ac489886f62d95acb27722aecbbe146ad37bc4a865d30
-
SSDEEP
6144:0zvJX8AjYULMP6Dl/mxwWg20pj3UruwY77NtzfITy5BR+NfNONQmhYuI3dFTrbi1:0TjYrP9wN2K3Ur+hITUB2FBFvbi1
Malware Config
Signatures
Files
-
78627a47efe229c997215527333b43445e5d4542946a11059c5adf4d34adebde.exe windows x86
0ed685b578f1c5d3e8bff1804eb6d9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegSetValueExA
user32
EndPaint
GetDC
SendMessageA
GetClientRect
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
PeekMessageA
TranslateMessage
IsWindowEnabled
GetSubMenu
CreateWindowExA
FillRect
SetFocus
DispatchMessageA
GetWindowRect
SetCapture
ReleaseCapture
SetWindowTextA
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
SetForegroundWindow
MessageBeep
MoveWindow
MessageBoxA
IsWindowVisible
InvalidateRect
SetCursor
IsWindow
SetWindowPos
ReleaseDC
DefWindowProcA
kernel32
lstrlenA
GetVersion
GetCurrentProcessId
GetStdHandle
GetConsoleOutputCP
GetFileAttributesA
WaitForSingleObject
LockResource
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
LocalAlloc
CreateFileA
FreeEnvironmentStringsW
SetStdHandle
GetTempPathA
WideCharToMultiByte
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
SetEvent
LocalFree
GetEnvironmentVariableA
FindClose
TlsGetValue
FormatMessageA
SetLastError
InitializeCriticalSection
GetModuleFileNameW
GetOEMCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
FindResourceW
HeapCreate
GetEnvironmentStrings
InterlockedExchange
GetModuleHandleW
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCurrentDirectoryA
GetCommandLineW
SizeofResource
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GlobalFree
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
CreateFileW
GlobalLock
CreateFileMappingA
CompareStringA
CompareStringW
WriteFile
GetProcessHeap
GetProcAddress
DeleteFileW
GetCPInfo
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
InterlockedDecrement
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
gdi32
SetBkColor
DeleteObject
DeleteDC
SetTextColor
CreateCompatibleDC
msvcrt
_exit
_cexit
_controlfp
exit
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ