Static task
static1
Behavioral task
behavioral1
Sample
78ff958481c56e8bf035fb6d298b11615366adbe0e2a7d3b603e06c872b8e039.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78ff958481c56e8bf035fb6d298b11615366adbe0e2a7d3b603e06c872b8e039.exe
Resource
win10v2004-20220812-en
General
-
Target
78ff958481c56e8bf035fb6d298b11615366adbe0e2a7d3b603e06c872b8e039
-
Size
102KB
-
MD5
26d710c005c2d204c85ef05f55b925e0
-
SHA1
956ea283c344fc7767d874ece1339fd391ff89a4
-
SHA256
78ff958481c56e8bf035fb6d298b11615366adbe0e2a7d3b603e06c872b8e039
-
SHA512
0aa4c9a84566200d27ffdf1214b9412a31bfa2164fc7d92a650a341d696da32ed52dd6a6ea3220c20c2678bc482f587621c29a84b2705a677e3e3cef57c9aea2
-
SSDEEP
768:3JLmlmGtKHKtK6krYLVvAfzlY7TOvvRCwmPJSfzr/BZepKvX5qvKBv/z78MZMVEp:3EyoVviY7Abv/BZ1vaKB/8FEqncr
Malware Config
Signatures
Files
-
78ff958481c56e8bf035fb6d298b11615366adbe0e2a7d3b603e06c872b8e039.exe windows x86
7ce9954bb4e497a143be40a2912441ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateDCA
DeleteDC
GetDeviceCaps
kernel32
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetFileSize
GetLastError
GetLogicalDriveStringsA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MoveFileA
MultiByteToWideChar
ReadFile
RtlMoveMemory
RtlZeroMemory
SetFileAttributesA
SetFilePointer
SizeofResource
Sleep
UnmapViewOfFile
WriteFile
lstrcatA
lstrcpyA
lstrlenA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
shell32
SHGetSpecialFolderPathA
ShellExecuteA
user32
DialogBoxParamA
EndDialog
KillTimer
PostMessageA
SetTimer
SetWindowPos
wsprintfA
ws2_32
accept
bind
closesocket
connect
htons
inet_addr
listen
recv
select
send
socket
WSAStartup
WSACleanup
Sections
.data? Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.res Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.add Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE