Static task
static1
Behavioral task
behavioral1
Sample
1cb78dbde612e3e5fd0e7d47db53a094632e8ee90aa4d235e045336b5690b8b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1cb78dbde612e3e5fd0e7d47db53a094632e8ee90aa4d235e045336b5690b8b6.exe
Resource
win10v2004-20220812-en
General
-
Target
1cb78dbde612e3e5fd0e7d47db53a094632e8ee90aa4d235e045336b5690b8b6
-
Size
496KB
-
MD5
34029ac5823c97b5009dda8610f110e0
-
SHA1
05d8111eda97bdb139991a45385789b4b12803b7
-
SHA256
1cb78dbde612e3e5fd0e7d47db53a094632e8ee90aa4d235e045336b5690b8b6
-
SHA512
292cc3045070cb9836c62dac095348b50b46077db0ed00ede5481e64f8872aa888866c8b0111c4bdbabe6547b31e22a62102d428c52aa7cfa6c42b989f79990a
-
SSDEEP
12288:G1eTFMvC/bJuZBqPn16QhkrtTrGYzocXjIOoVDvheg+:GQwZBqNSrtSYM+AVz+
Malware Config
Signatures
Files
-
1cb78dbde612e3e5fd0e7d47db53a094632e8ee90aa4d235e045336b5690b8b6.exe windows x86
0de8a6194c0dc2240c9ba76b22f3819a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlpUnWaitCriticalSection
ole32
CoDisableCallCancellation
kernel32
GetCurrentProcess
user32
GetForegroundWindow
GetInputDesktop
Sections
.text Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE