Static task
static1
Behavioral task
behavioral1
Sample
078770b1d0f3d77369d2c394742ce29f3b2ed3a7946bd085b739ea138629f686.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
078770b1d0f3d77369d2c394742ce29f3b2ed3a7946bd085b739ea138629f686.exe
Resource
win10v2004-20220901-en
General
-
Target
078770b1d0f3d77369d2c394742ce29f3b2ed3a7946bd085b739ea138629f686
-
Size
95KB
-
MD5
911386fe6a3c3575a0d22092cb9ac02e
-
SHA1
4251f2be788f77821b5f022317945872e31c53cf
-
SHA256
078770b1d0f3d77369d2c394742ce29f3b2ed3a7946bd085b739ea138629f686
-
SHA512
f180202e651559c2ab886da06cb34efd8a47a23fb3892723d23cfdfecdc06b57d21f71a44942fafa365680d3c0978cef6b2d5daf708b571e1ea1931449f9c7d1
-
SSDEEP
1536:rN4s1JRysa8z5jkWC0mm5/67g90YeyIgwMRFu:Zh1v7jj3C0X5/6G0YeyIg
Malware Config
Signatures
Files
-
078770b1d0f3d77369d2c394742ce29f3b2ed3a7946bd085b739ea138629f686.exe windows x86
6a7c0cea8833adc3a2dc2af82e7260e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
ExitProcess
OpenFile
GetLastError
DeleteFileA
CopyFileW
DeleteFileW
CreateProcessA
GetConsoleMode
GetFileTime
FindFirstFileA
GetUserDefaultLangID
FindAtomA
GetStdHandle
GetFileSize
GetCurrentThread
GetCurrentThreadId
CreateDirectoryA
GetCurrentProcess
GetStdHandle
CreateProcessA
GetConsoleMode
GlobalFree
GetOEMCP
ExitThread
GetCurrentProcessId
Sleep
GetCPInfo
ExitProcess
OpenFile
GetUserDefaultLangID
GetCurrentThreadId
GetCurrentThread
GetFileTime
DeleteFileA
GetLastError
GetUserDefaultLCID
GetCPInfo
GetComputerNameA
GetStdHandle
GlobalFree
DeleteFileW
GetUserDefaultLangID
CreateDirectoryA
DeleteFileA
CopyFileW
GetConsoleOutputCP
DeleteAtom
Sleep
GetLastError
CreateThread
GetCurrentThreadId
CreateDirectoryA
OpenFile
GetCommandLineA
CreateProcessA
GetFileSize
GlobalFree
GetConsoleMode
DeleteFileW
DeleteAtom
FindAtomA
GetComputerNameA
CreateThread
GetCurrentThread
GetCurrentProcessId
GetFileTime
GetOEMCP
GlobalFree
GetLastError
GetConsoleMode
ExitThread
Sleep
GetCurrentThreadId
DeleteFileA
GetCurrentProcess
GetLastError
DeleteFileW
GlobalFree
GetConsoleMode
GetComputerNameA
CopyFileW
FindAtomA
DeleteFileA
CreateProcessA
ExitThread
GetStdHandle
FindFirstFileA
DeleteAtom
CreateDirectoryA
GetFileTime
user32
IsMenu
GetCursor
DialogBoxParamA
CopyImage
CreateIcon
CloseWindow
InsertMenuA
CalcMenuBar
GetDlgItem
DrawIcon
GetFocus
GetMenu
AppendMenuW
GetWindowTextA
DrawTextW
IsWindow
CopyRect
DialogBoxParamA
AlignRects
GetDC
LoadMenuA
DialogBoxParamW
BlockInput
GetDlgItem
LoadCursorA
CalcMenuBar
InsertMenuA
AppendMenuA
AppendMenuW
CopyImage
GetWindowTextLengthA
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueW
RegEnumValueA
RegOpenKeyW
RegReplaceKeyA
RegEnumKeyA
RegLoadKeyW
RegQueryValueA
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyW
RegQueryValueW
Sections
.itext Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 45KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ