Static task
static1
Behavioral task
behavioral1
Sample
2b78e3fbacfd20b6b3b41188839b49255c7547a80d36d65a3f09e30bcad08dae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b78e3fbacfd20b6b3b41188839b49255c7547a80d36d65a3f09e30bcad08dae.exe
Resource
win10v2004-20220812-en
General
-
Target
2b78e3fbacfd20b6b3b41188839b49255c7547a80d36d65a3f09e30bcad08dae
-
Size
744KB
-
MD5
64f5c683ecb851883b995b674030db86
-
SHA1
37064d950aabf626aba02e27f1f39198d39fbc7a
-
SHA256
2b78e3fbacfd20b6b3b41188839b49255c7547a80d36d65a3f09e30bcad08dae
-
SHA512
821f4a589d698c8e2b6f80ce854b53d7c63e7278d8d9d809becfb5b3c45f7784b81848094149660a934f3c0845bc5dba94eff4fe02ec83f91fe570a283b34ca2
-
SSDEEP
12288:0FifD/kZOcjPW+FVAT+bA2kTofuGrqGH44Eze4u1dwpRbS+EZZZya/K:0QfD/kZOcj++FVAT+bOTW5qzbze4SwpL
Malware Config
Signatures
Files
-
2b78e3fbacfd20b6b3b41188839b49255c7547a80d36d65a3f09e30bcad08dae.exe windows x86
10de2b2de934340b3d75bf03d5986501
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetLastError
GetModuleHandleA
ExitProcess
VirtualAlloc
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
LockResource
SizeofResource
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindNextFileA
ResetEvent
CompareStringA
FindFirstFileA
UnmapViewOfFile
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetModuleFileNameA
SetEvent
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetOEMCP
GetTickCount
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
VirtualQuery
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
GetSystemDirectoryA
MulDiv
CreateFileA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
lstrcmpiW
RemoveDirectoryA
GetVersionExA
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
TlsGetValue
FindClose
GetEnvironmentVariableA
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
LoadLibraryW
WideCharToMultiByte
FreeEnvironmentStringsW
SetErrorMode
lstrcatA
LocalAlloc
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentProcessId
GetCommandLineA
GetCurrentThread
GetVersionExW
GetCurrentThreadId
user32
GetFocus
SetForegroundWindow
GetDesktopWindow
SendMessageA
TrackPopupMenu
LoadCursorA
ScreenToClient
GetDlgItem
GetWindowLongA
CheckMenuItem
SetWindowLongA
ReleaseCapture
IsIconic
GetWindowRect
DefWindowProcA
PeekMessageA
SetFocus
DispatchMessageA
SetTimer
GetSubMenu
RegisterClassA
EnableMenuItem
EndDialog
GetWindow
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
UnregisterClassA
ReleaseDC
GetCursorPos
GetDC
EndPaint
IsWindow
SetWindowPos
PostQuitMessage
MoveWindow
InvalidateRect
wsprintfA
GetClientRect
CallWindowProcA
SetCursor
MessageBoxA
LoadStringA
GetSysColor
advapi32
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
msvcrt
_exit
_cexit
Sections
.text Size: 711KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ