Static task
static1
Behavioral task
behavioral1
Sample
7bc78236b8bb2f792bd2bb255b68af87c80acb2e25d7f8c47504e4a1f34e04d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bc78236b8bb2f792bd2bb255b68af87c80acb2e25d7f8c47504e4a1f34e04d2.exe
Resource
win10v2004-20220812-en
General
-
Target
7bc78236b8bb2f792bd2bb255b68af87c80acb2e25d7f8c47504e4a1f34e04d2
-
Size
12KB
-
MD5
0ab39f0ba74572a830a02be4689bb450
-
SHA1
d688885ce7fd659c08cc5e3e7b6f09baa8eab410
-
SHA256
7bc78236b8bb2f792bd2bb255b68af87c80acb2e25d7f8c47504e4a1f34e04d2
-
SHA512
c0c8482b1f5da3a35cea48eb089e4f49117f7908432f5b4eed2ff851b025899da618b64af766edf4b25d3faeeb5b15e9712f61d685e55ac07b6125280d08ad67
-
SSDEEP
192:Tq3EuczHJtxZXjFD7CyQUg9nlLdP1oynaY5wwRRrZ0W:VzHJtxZXpvQNnll1JRrZ0
Malware Config
Signatures
Files
-
7bc78236b8bb2f792bd2bb255b68af87c80acb2e25d7f8c47504e4a1f34e04d2.exe windows x86
252e825162e27cf6d01c06e6cb080197
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetCommandLineA
CreateThread
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
WaitForSingleObject
GlobalLock
GlobalAlloc
WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA
DeleteFileA
Sleep
CopyFileA
GetCurrentProcessId
WinExec
CreateRemoteThread
ReadProcessMemory
user32
FindWindowExA
FindWindowA
SendMessageA
advapi32
LookupPrivilegeValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
winmm
mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
strlen
sprintf
strncpy
sscanf
strchr
strrchr
strcpy
memset
fclose
fseek
fwrite
fopen
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ