Static task
static1
Behavioral task
behavioral1
Sample
178a8abdf7ee5ec50b705fb185bbb39ffd87ccc00e6f3cbc979035696b5d366d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
178a8abdf7ee5ec50b705fb185bbb39ffd87ccc00e6f3cbc979035696b5d366d.exe
Resource
win10v2004-20220812-en
General
-
Target
178a8abdf7ee5ec50b705fb185bbb39ffd87ccc00e6f3cbc979035696b5d366d
-
Size
611KB
-
MD5
68f988c95a1d09d51df4827e0bdd8420
-
SHA1
b4375da6187fa0e42c2b92f68cadf6496eaaabbf
-
SHA256
178a8abdf7ee5ec50b705fb185bbb39ffd87ccc00e6f3cbc979035696b5d366d
-
SHA512
72d92e1051709fe1d5d9fa373076921d64608b3c01787c90853411995c3a6b4682d6e6427e9791a88d99daf904373849858dfe815fe83bc3cdc704b3a7dbd6c5
-
SSDEEP
12288:1e7DRBSznBpHP8vEN2TEUqxaBGnqeqrQm9RGafK4z/n0TbIse:1e7DXSDBpHEv7a4IqPrbkafK470Ise
Malware Config
Signatures
Files
-
178a8abdf7ee5ec50b705fb185bbb39ffd87ccc00e6f3cbc979035696b5d366d.exe windows x86
7cf596e3d6bddecfc1aed8dd900b4cce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarCyFromUI4
advapi32
CredRenameA
kernel32
GetUserDefaultLCID
lstrcpynA
GetSystemDefaultLangID
ntdll
NtCreateJobSet
Sections
.text Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE