Static task
static1
Behavioral task
behavioral1
Sample
d78fe7644b36d5e6cea96459a62b0af892615562f9cb5d18083c138fb2335f05.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d78fe7644b36d5e6cea96459a62b0af892615562f9cb5d18083c138fb2335f05.exe
Resource
win10v2004-20220812-en
General
-
Target
d78fe7644b36d5e6cea96459a62b0af892615562f9cb5d18083c138fb2335f05
-
Size
301KB
-
MD5
80dc7b094312509ce5764142cdd44080
-
SHA1
2bf98b3dd75d713ecf4c00e00411e35d09885ca2
-
SHA256
d78fe7644b36d5e6cea96459a62b0af892615562f9cb5d18083c138fb2335f05
-
SHA512
e9f4b7f8513bff1a05851183b7dc248ad08941741f4161d22506e1374bf9d333deb0c8e4b32e38a7b3e85854532a549da5abd723a02c163f8fc87854bd6c080e
-
SSDEEP
6144:sWnUBpqVEZqsg91/oNHKKIUVikiVOfwF0I:zMp+HsgoNqPw
Malware Config
Signatures
Files
-
d78fe7644b36d5e6cea96459a62b0af892615562f9cb5d18083c138fb2335f05.exe windows x86
c6cce9a58ad58714ac85429539476f27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoW
CreateDirectoryW
GetFileAttributesA
GetDriveTypeW
TlsGetValue
IsValidCodePage
GetExitCodeThread
IsBadWritePtr
LocalLock
GetFileAttributesA
FindResourceW
SetLastError
HeapFree
FindClose
MapViewOfFile
GetTickCount
VirtualProtect
GetCurrentProcess
GetModuleHandleA
RemoveDirectoryW
GetStringTypeA
user32
LoadStringA
SetCursor
PeekMessageW
LoadCursorA
DispatchMessageA
GetWindowTextW
PostMessageW
IsWindow
LoadImageW
GetWindowLongW
SetFocus
IsDialogMessageA
wsprintfW
msctf
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE