Static task
static1
Behavioral task
behavioral1
Sample
b78f2794617550dfb2f2bb03728407c4a60ec8345225c76a961a99eb244340c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b78f2794617550dfb2f2bb03728407c4a60ec8345225c76a961a99eb244340c4.exe
Resource
win10v2004-20220901-en
General
-
Target
b78f2794617550dfb2f2bb03728407c4a60ec8345225c76a961a99eb244340c4
-
Size
312KB
-
MD5
6b616207b1f99fc7aefca411f58d5aa0
-
SHA1
ab68a044ceaef16c78cfc6dd86c0f827acb314a8
-
SHA256
b78f2794617550dfb2f2bb03728407c4a60ec8345225c76a961a99eb244340c4
-
SHA512
e3abdba3590e49a330612d798f5b44ee588afa63369601ebfdf252e7832b78deed0915b9036cba1e06c77688cbce845d77e80b1159d89f43b29fa1db0e410527
-
SSDEEP
6144:s/l/ECVOcyBBpiN0cmRKD54Lpsb6Fn8WznX6aclFn8d:s/l/kUNzHaVsW182X6f8
Malware Config
Signatures
Files
-
b78f2794617550dfb2f2bb03728407c4a60ec8345225c76a961a99eb244340c4.exe windows x64
517d2acd18c4ebc6329e7bed6cbae375
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WriteFile
CreateFileW
GetLastError
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
FlushFileBuffers
CreateFileA
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStartupInfoW
HeapAlloc
HeapFree
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ole32
CoTaskMemFree
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 236KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ