Static task
static1
Behavioral task
behavioral1
Sample
78ef6a63e6dae19a9aec09e2815ff80ba52f0ff5c5f07046189a8e4368ebd9d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78ef6a63e6dae19a9aec09e2815ff80ba52f0ff5c5f07046189a8e4368ebd9d7.exe
Resource
win10v2004-20220812-en
General
-
Target
78ef6a63e6dae19a9aec09e2815ff80ba52f0ff5c5f07046189a8e4368ebd9d7
-
Size
235KB
-
MD5
920f5227ac792113e55841d5bfe56d4e
-
SHA1
50ad94d983f615a16e9be4072bde9e9ae7ee25b0
-
SHA256
78ef6a63e6dae19a9aec09e2815ff80ba52f0ff5c5f07046189a8e4368ebd9d7
-
SHA512
a7a2f7428955bb6c781834bbf84bf2ea9190d11b63b4a035c14434e3d4dc991166197797f58103d2d911dc7933f66cbf6c1f52dd1f87d74ec9d329faf8e1606e
-
SSDEEP
6144:payguMtwsCz0OcPKFwL7hJ47oipKfh3FgosVIATRNUn9U:payCtvCzgPKM1J4sipKfhuOCI9U
Malware Config
Signatures
Files
-
78ef6a63e6dae19a9aec09e2815ff80ba52f0ff5c5f07046189a8e4368ebd9d7.exe windows x86
45a746c7f15d5a575ecdb89650824e51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalUnlock
LocalFlags
GetCompressedFileSizeA
GetVolumeNameForVolumeMountPointW
FindCloseChangeNotification
WriteProfileSectionW
SetSystemPowerState
GetPrivateProfileSectionNamesA
GetComputerNameExA
ExitProcess
SetSystemTimeAdjustment
LocalHandle
GetBinaryTypeA
InterlockedExchangeAdd
MoveFileW
SetVolumeMountPointA
VerifyVersionInfoA
ReleaseSemaphore
SetCurrentDirectoryA
FindResourceExW
ResetWriteWatch
CreateNamedPipeA
WritePrivateProfileStructW
FindFirstFileA
GlobalGetAtomNameA
GetCurrentThread
GetNumberFormatA
RtlUnwind
SetLocalTime
QueueUserAPC
SetProcessWorkingSetSize
OpenSemaphoreW
CancelDeviceWakeupRequest
user32
DdeNameService
DdeQueryConvInfo
GetKeyNameTextW
GetUserObjectInformationW
DestroyMenu
DrawIcon
GetMouseMovePointsEx
CallMsgFilterA
SendMessageTimeoutW
EnumPropsA
GetDCEx
DdeDisconnectList
SetWindowTextA
LoadIconA
OffsetRect
RealGetWindowClassW
ExitWindowsEx
VkKeyScanA
IsZoomed
ActivateKeyboardLayout
SetClipboardData
GetSubMenu
GetPropW
GetMenuContextHelpId
DeregisterShellHookWindow
DdeAccessData
DdeCreateDataHandle
ValidateRgn
GetWindowLongA
WaitMessage
CopyImage
GetParent
EnumDisplayDevicesA
IsCharAlphaA
SetWindowsHookW
DdeInitializeA
GetProcessWindowStation
GetKeyboardLayoutNameW
DdeAddData
LoadKeyboardLayoutW
GetWindowLongW
DdeAbandonTransaction
MessageBoxA
EnumPropsExW
WinHelpA
SetCapture
wvsprintfW
LoadImageW
TranslateAcceleratorA
GetAltTabInfoA
CharToOemW
SetDoubleClickTime
RemoveMenu
OpenWindowStationW
CharNextA
LoadCursorFromFileW
AppendMenuW
FindWindowExW
DdeSetUserHandle
MoveWindow
SetSysColors
DlgDirListW
ClipCursor
SetForegroundWindow
CallWindowProcA
UnpackDDElParam
RegisterDeviceNotificationW
LoadAcceleratorsW
GetMenuBarInfo
ModifyMenuW
CharNextW
EnumThreadWindows
SendIMEMessageExA
UnregisterClassW
SetWindowLongA
GetGuiResources
GetListBoxInfo
LockSetForegroundWindow
ToUnicode
DlgDirListComboBoxA
GetCapture
InsertMenuA
GetMenuStringA
CheckMenuItem
GetQueueStatus
LoadMenuIndirectA
SetRect
MessageBoxExA
GetClipCursor
CopyAcceleratorTableW
IMPSetIMEW
MonitorFromRect
SetLayeredWindowAttributes
InvalidateRgn
ValidateRect
GetClassNameA
DrawStateW
SetLastErrorEx
CreateAcceleratorTableW
SetRectEmpty
GetWindowTextA
LoadAcceleratorsA
MenuItemFromPoint
IsWindowUnicode
GetGUIThreadInfo
IsDialogMessageW
UnloadKeyboardLayout
EnumDisplayMonitors
RegisterShellHookWindow
LoadMenuW
GetMenuDefaultItem
GetClassLongA
shell32
FreeIconList
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ