Static task
static1
Behavioral task
behavioral1
Sample
b78c4487cdfb864d6a486c0d17884b766ca96245a6b6cdc93ac12c6a9394a489.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b78c4487cdfb864d6a486c0d17884b766ca96245a6b6cdc93ac12c6a9394a489.exe
Resource
win10v2004-20220812-en
General
-
Target
b78c4487cdfb864d6a486c0d17884b766ca96245a6b6cdc93ac12c6a9394a489
-
Size
148KB
-
MD5
0db19af82487d407e8f36f74e5dd79a0
-
SHA1
4f12a8f6b81091d04ff8d5b91538650d3b34c6a5
-
SHA256
b78c4487cdfb864d6a486c0d17884b766ca96245a6b6cdc93ac12c6a9394a489
-
SHA512
3ca54d51413fa3c59163d2b9d3ebdb3526f7b5cc932105d4d353d94c81b21347f476602c244fa108c61364a3c9b9c413a594e1ad8ceefb7579f6e851f0ed3722
-
SSDEEP
3072:YCBwKRcv+ZLiCfCR8o/f2f1pAtKae14Gz8V/1nHjPVv:YCBxeGxfB886GATD
Malware Config
Signatures
Files
-
b78c4487cdfb864d6a486c0d17884b766ca96245a6b6cdc93ac12c6a9394a489.exe windows x86
53b81354a45c0595d743a9728d3b1efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
ResetEvent
WriteFile
FreeLibrary
WaitForMultipleObjects
SetEnvironmentVariableA
GetTimeZoneInformation
IsValidCodePage
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
GetStartupInfoA
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
GetModuleHandleA
GetStartupInfoW
InterlockedDecrement
QueryPerformanceCounter
CompareFileTime
InterlockedIncrement
GetCurrentThread
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
EnterCriticalSection
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
GetLocaleInfoA
CompareStringW
user32
GetSystemMetrics
gdi32
CreateSolidBrush
SetBrushOrgEx
SetTextAlign
RealizePalette
DPtoLP
CreateDCA
SelectPalette
Ellipse
Polyline
CreateFontW
CreateBrushIndirect
GetTextExtentPointA
MoveToEx
SetPixel
SetPixelV
GetDCOrgEx
GetWindowOrgEx
CreateRectRgnIndirect
ExtEscape
SaveDC
GetDeviceCaps
ExtSelectClipRgn
ExtTextOutW
CreateBitmap
GetPaletteEntries
CreatePalette
SetMapMode
CreatePen
RestoreDC
CreatePenIndirect
UnrealizeObject
CreateDIBitmap
ExtCreatePen
DeleteDC
GetDIBColorTable
GetViewportExtEx
ScaleWindowExtEx
EndDoc
SetDIBColorTable
DeleteObject
BitBlt
SelectObject
GetTextMetricsA
CreateHalftonePalette
Rectangle
SetBkMode
ExtTextOutA
GetBitmapBits
RectVisible
GetTextExtentPoint32W
GetPixel
GetStockObject
SetViewportExtEx
GetMapMode
ole32
CoTaskMemFree
OleInitialize
OleGetClipboard
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ