Static task
static1
Behavioral task
behavioral1
Sample
f78e6d068bed6a7d321ea0c33ed8ca7cd8e49f74386b5442e865e62ffdbb658f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f78e6d068bed6a7d321ea0c33ed8ca7cd8e49f74386b5442e865e62ffdbb658f.exe
Resource
win10v2004-20221111-en
General
-
Target
f78e6d068bed6a7d321ea0c33ed8ca7cd8e49f74386b5442e865e62ffdbb658f
-
Size
671KB
-
MD5
2881aa307e224ca7b662789dd4df0478
-
SHA1
38f71b9a759129d955dd063f476df41da013fcac
-
SHA256
f78e6d068bed6a7d321ea0c33ed8ca7cd8e49f74386b5442e865e62ffdbb658f
-
SHA512
14730b7fb874fb3b2f4cc802918048a79098a8d7ea5f5ec9437a561cd831759c63830809257a0de16a90d46804bd11b8f88d5615482b6bfd27e3cf526aaa38e6
-
SSDEEP
12288:buC9TJHxrXeUaKE5Wrq2MMH3CWjUn0GyODHXrEPL:6EupKEsr2GyWAn
Malware Config
Signatures
Files
-
f78e6d068bed6a7d321ea0c33ed8ca7cd8e49f74386b5442e865e62ffdbb658f.exe windows x86
49af342f8457b3938c15cd98c0bb0912
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowPos
gdi32
SetTextColor
shell32
SHGetFolderPathW
comctl32
_TrackMouseEvent
shlwapi
PathStripToRootW
ole32
CoTaskMemFree
oleaut32
VariantCopy
libmng
_mng_setcb_openstream@8
ijl15
ord2
advapi32
SetFileSecurityW
winspool.drv
ClosePrinter
Sections
.text Size: 632KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE