Static task
static1
Behavioral task
behavioral1
Sample
eb78594c4d7a2f284163398a8c36433f4bac22946358c86e8e6e645e903ca0a9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb78594c4d7a2f284163398a8c36433f4bac22946358c86e8e6e645e903ca0a9.exe
Resource
win10v2004-20220901-en
General
-
Target
eb78594c4d7a2f284163398a8c36433f4bac22946358c86e8e6e645e903ca0a9
-
Size
244KB
-
MD5
e5157385cff4d5ab7ebcc2e52a37045d
-
SHA1
36e3390720815b64caa8bf2b932a2861ec5d73b6
-
SHA256
eb78594c4d7a2f284163398a8c36433f4bac22946358c86e8e6e645e903ca0a9
-
SHA512
596071fe2c3268d8740a18ef3765a14632327be35ac411f11111df0c2c092e20f5bfa2ba0d16c62d93a634045f626b285d70aab8384c73f8eb13dbf18c71043c
-
SSDEEP
6144:D2UTjQHBtxxraaOvP49WYARB0M0lKR+uRXLQxfL0gHQCsIOEyZ:aKjQBtx1aaOvP49WYARB0MkKR+uRbGLS
Malware Config
Signatures
Files
-
eb78594c4d7a2f284163398a8c36433f4bac22946358c86e8e6e645e903ca0a9.exe windows x86
894329b0cd9b968257c9a092b69f1a86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrUserMarshalBufferSize
I_RpcFree
RpcMgmtWaitServerListen
urlmon
HlinkGoForward
URLDownloadToFileA
CoGetClassObjectFromURL
ObtainUserAgentString
CreateURLMoniker
CoInternetCreateZoneManager
SetSoftwareUpdateAdvertisementState
RegisterFormatEnumerator
HlinkSimpleNavigateToString
ReleaseBindInfo
CoInternetGetSession
URLDownloadToFileW
URLOpenPullStreamW
CreateFormatEnumerator
UrlMkGetSessionOption
URLOpenPullStreamA
CoInternetCompareUrl
MkParseDisplayNameEx
GetSoftwareUpdateInfo
CoInternetCreateSecurityManager
RegisterMediaTypes
FindMediaTypeClass
HlinkGoBack
URLOpenBlockingStreamW
rasapi32
RasEditPhonebookEntryW
RasGetErrorStringW
RasEnumDevicesW
RasCreatePhonebookEntryW
RasRenameEntryA
RasGetProjectionInfoW
RasGetConnectStatusW
RasEnumEntriesA
RasDeleteEntryW
RasSetEntryDialParamsA
RasEnumConnectionsW
RasValidateEntryNameA
RasDialA
RasValidateEntryNameW
RasGetEntryDialParamsA
RasGetCountryInfoW
RasDialW
RasGetErrorStringA
RasGetEntryPropertiesW
RasDeleteEntryA
RasRenameEntryW
RasGetEntryDialParamsW
RasCreatePhonebookEntryA
RasEnumEntriesW
winspool.drv
EnumPrinterKeyW
ResetPrinterW
DeleteFormA
AddPrinterConnectionW
DeletePrinterKeyW
EnumPrintersA
EnumMonitorsW
XcvDataW
AddPrinterDriverA
AddPrintProcessorW
AddJobW
AddPrinterDriverExW
AddFormW
DeletePortW
AddMonitorA
DeletePrinterDriverExW
GetPrinterDriverA
FindClosePrinterChangeNotification
AdvancedDocumentPropertiesA
StartDocPrinterA
GetPrinterDataExW
GetPrintProcessorDirectoryA
AddFormA
DeletePrinterDataW
GetPrinterDriverW
DeleteMonitorW
AddPrintProvidorW
EnumPrintProcessorsW
EnumPrinterDriversA
GetFormA
EnumPrinterDataExW
GetJobW
ConfigurePortW
DeletePrinter
EnumPrinterDataW
SetPrinterW
EnumPrintersW
PrinterMessageBoxA
EndDocPrinter
WaitForPrinterChange
DeletePrinterDriverW
DeletePrintProcessorW
FindNextPrinterChangeNotification
SetJobW
DocumentPropertiesW
GetPrinterDataW
DeletePrinterConnectionW
ReadPrinter
EnumPortsA
SetPortA
GetPrinterDataExA
SetPrinterDataA
SetPrinterDataExW
AddPrinterConnectionA
StartDocPrinterW
GetPrinterDataA
AddPrinterDriverExA
EnumPrintProcessorsA
AddMonitorW
EnumMonitorsA
DeletePrinterKeyA
StartPagePrinter
AddJobA
DocumentPropertiesA
EndPagePrinter
SetFormW
PrinterProperties
SetFormA
DeviceCapabilitiesA
EnumPrinterDataA
AddPrintProcessorA
AddPortW
GetPrinterA
DeletePrinterDataExA
SetPrinterDataExA
DeletePrintProvidorA
EnumFormsA
AddPortA
GetJobA
OpenPrinterW
DeletePrintProvidorW
WritePrinter
SetJobA
EnumJobsA
SetPrinterA
AddPrinterA
EnumPrintProcessorDatatypesW
PrinterMessageBoxW
DeviceCapabilitiesW
ScheduleJob
DeletePrinterConnectionA
DeletePrinterDriverA
EnumPrinterKeyA
OpenPrinterA
FindFirstPrinterChangeNotification
AddPrinterDriverW
GetFormW
DeletePortA
EnumFormsW
GetPrintProcessorDirectoryW
AbortPrinter
SetPrinterDataW
EnumPrinterDriversW
DeleteMonitorA
kernel32
ExpandEnvironmentStringsA
GetStringTypeExW
FindNextFileW
GetOEMCP
GetLogicalDriveStringsA
EnumResourceNamesA
GetStartupInfoA
CreateFileA
GetDateFormatA
GetSystemTime
GlobalReAlloc
AllocConsole
FormatMessageA
GetNumberFormatA
CancelIo
DefineDosDeviceA
CreateFileW
CreateThread
AreFileApisANSI
AddAtomA
GetFileAttributesA
GetLocaleInfoA
GetPrivateProfileStringW
GetLocaleInfoW
FindNextFileA
HeapAlloc
CreateEventA
FreeEnvironmentStringsW
GetDiskFreeSpaceExW
GetProcessHeap
FreeLibrary
FreeLibraryAndExitThread
EnumResourceNamesW
GetNumberFormatW
GetEnvironmentStringsW
CopyFileA
GlobalLock
GlobalHandle
FindResourceA
CreatePipe
FlushInstructionCache
GetCurrentThreadId
GetTempFileNameA
EnumSystemLocalesW
GetSystemDefaultLangID
GetCurrentProcessId
GlobalAddAtomW
GetModuleFileNameW
GetShortPathNameA
GetProfileIntW
HeapFree
FindFirstFileA
FlushFileBuffers
GetCPInfo
FormatMessageW
FindClose
GetPrivateProfileIntA
GetModuleHandleA
GetVersionExW
GlobalAddAtomA
DeleteFileA
GetSystemDirectoryA
ExitThread
GetProcessVersion
pdh
PdhSetQueryTimeRange
PdhGetCounterTimeBase
PdhOpenQueryA
PdhParseCounterPathW
PdhCloseQuery
PdhGetLogFileSize
PdhGetDllVersion
PdhGetDataSourceTimeRangeW
PdhGetCounterInfoA
PdhGetDefaultPerfCounterA
PdhParseCounterPathA
PdhEnumMachinesA
PdhGetDefaultPerfCounterW
PdhCollectQueryData
PdhSetCounterScaleFactor
PdhEnumMachinesW
PdhConnectMachineW
PdhEnumObjectsW
PdhEnumObjectsA
PdhLookupPerfIndexByNameW
PdhGetDataSourceTimeRangeA
PdhConnectMachineA
PdhGetFormattedCounterArrayA
setupapi
SetupDiGetWizardPage
SetupInitDefaultQueueCallbackEx
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoList
SetupFindFirstLineA
SetupDiGetDeviceInterfaceDetailW
SetupQueryInfVersionInformationW
SetupQueueDeleteA
SetupDiInstallClassW
SetupDiGetClassDevsExW
SetupQueryInfVersionInformationA
SetupDiGetDeviceInfoListDetailA
SetupCreateDiskSpaceListW
SetupInstallFileExW
SetupRemoveSectionFromDiskSpaceListA
SetupCreateDiskSpaceListA
SetupGetInfInformationA
SetupDiGetSelectedDriverW
SetupSetDirectoryIdW
SetupDiDrawMiniIcon
SetupQuerySourceListW
SetupInstallFileExA
SetupSetPlatformPathOverrideW
SetupOpenLog
SetupOpenAppendInfFileA
SetupAdjustDiskSpaceListW
SetupDiCancelDriverInfoSearch
SetupDiGetHwProfileListExA
SetupCloseLog
SetupDiGetDeviceInstanceIdA
SetupDiClassNameFromGuidExA
SetupDiGetClassDevsExA
SetupGetSourceInfoW
SetupDiGetDriverInstallParamsW
SetupQueueRenameW
SetupDiMoveDuplicateDevice
SetupDiOpenDeviceInterfaceRegKey
SetupDiClassNameFromGuidExW
SetupAddToSourceListA
SetupDiGetClassDevsW
SetupDiGetSelectedDriverA
SetupDiOpenClassRegKey
SetupDiSelectOEMDrv
SetupAddSectionToDiskSpaceListA
SetupDiDeleteDevRegKey
SetupQueueCopyW
SetupDiClassNameFromGuidA
SetupDefaultQueueCallbackA
SetupSetDirectoryIdExW
SetupDiCreateDeviceInfoA
SetupDiGetHwProfileFriendlyNameExA
SetupDiGetDeviceInstallParamsA
SetupGetTargetPathA
SetupDiClassGuidsFromNameExA
SetupGetLineByIndexA
SetupDiCreateDeviceInfoListExW
SetupDiUnremoveDevice
SetupDiRemoveDevice
SetupDiRemoveDeviceInterface
SetupGetLineByIndexW
SetupDiDeleteDeviceInfo
SetupDiGetDriverInstallParamsA
SetupDiOpenDeviceInfoW
SetupDiGetHwProfileFriendlyNameW
SetupDiGetHwProfileFriendlyNameExW
SetupDiAskForOEMDisk
SetupDiGetDeviceInterfaceAlias
SetupGetStringFieldW
SetupDiSetSelectedDriverW
SetupAddToSourceListW
SetupDiGetClassDescriptionW
SetupQueryFileLogW
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDeviceInterfaceW
SetupDiCreateDeviceInfoListExA
SetupInitializeFileLogW
SetupDuplicateDiskSpaceListA
SetupCommitFileQueueW
SetupDiInstallDeviceInterfaces
SetupQueueRenameA
SetupGetIntField
SetupDiDeleteDeviceInterfaceRegKey
SetupDiCreateDeviceInterfaceRegKeyW
SetupRemoveFromSourceListA
SetupQueryDrivesInDiskSpaceListW
SetupGetTargetPathW
SetupDiSetDeviceRegistryPropertyA
SetupInstallFileW
SetupScanFileQueueA
SetupDiGetActualSectionToInstallW
SetupDuplicateDiskSpaceListW
SetupDiInstallDriverFiles
SetupCopyOEMInfW
SetupDiClassGuidsFromNameA
SetupTerminateFileLog
SetupDiGetClassImageListExA
SetupQueueDefaultCopyA
SetupGetSourceFileSizeW
SetupOpenInfFileW
SetupDiSetDeviceInstallParamsW
SetupOpenAppendInfFileW
SetupDiGetClassDescriptionExA
SetupInstallFromInfSectionA
SetupGetStringFieldA
SetupCommitFileQueueA
SetupAddSectionToDiskSpaceListW
SetupDiGetDeviceInfoListDetailW
SetupDiGetClassDevPropertySheetsA
SetupFindFirstLineW
SetupDiDestroyClassImageList
SetupQueueDefaultCopyW
SetupGetFieldCount
SetupDiGetClassImageIndex
SetupRenameErrorA
SetupDiBuildDriverInfoList
SetupDiDestroyDriverInfoList
SetupDiEnumDriverInfoA
SetupQueueDeleteSectionA
SetupGetLineTextW
SetupDiOpenClassRegKeyExW
SetupLogFileA
SetupRemoveInstallSectionFromDiskSpaceListW
SetupSetSourceListA
SetupDiDestroyDeviceInfoList
SetupDiGetDriverInfoDetailW
SetupDiGetHwProfileListExW
SetupCopyOEMInfA
SetupDiGetDriverInfoDetailA
SetupDiSetSelectedDriverA
SetupDiCreateDevRegKeyW
SetupFindNextMatchLineA
resutils
ResUtilSetPrivatePropertyList
ResUtilEnumPrivateProperties
ResUtilGetSzProperty
ResUtilResourceTypesEqual
ClusWorkerCheckTerminate
ResUtilVerifyPropertyTable
ResUtilGetEnvironmentWithNetName
ResUtilEnumResources
ResUtilGetMultiSzProperty
ResUtilSetDwordValue
ResUtilSetPropertyTable
ClusWorkerTerminate
ResUtilGetDwordProperty
ResUtilGetDwordValue
ResUtilStartResourceService
ResUtilGetAllProperties
ResUtilAddUnknownProperties
ResUtilGetSzValue
ResUtilResourcesEqual
ResUtilFindDwordProperty
ResUtilGetPrivateProperties
ResUtilPropertyListFromParameterBlock
ResUtilSetPropertyParameterBlock
ResUtilVerifyPrivatePropertyList
ResUtilFindSzProperty
imagehlp
SymSetOptions
mpr
WNetConnectionDialog
WNetCancelConnectionW
WNetConnectionDialog1A
WNetAddConnection2A
WNetDisconnectDialog
WNetAddConnection3A
WNetCloseEnum
WNetDisconnectDialog1A
WNetUseConnectionA
WNetGetProviderNameA
WNetCancelConnectionA
msvcrt
_XcptFilter
_exit
exit
_ftol
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
user32
DdeDisconnect
GetScrollInfo
DrawIcon
CharToOemA
GetDlgItemTextA
EnableWindow
EnumWindows
DispatchMessageA
CharUpperBuffA
DeleteMenu
FillRect
DdeUninitialize
CountClipboardFormats
ChangeClipboardChain
OpenDesktopA
CheckRadioButton
CheckMenuItem
DdeConnect
CreateDialogParamA
wininet
FindNextUrlCacheEntryExW
InternetSetOptionW
SetUrlCacheEntryInfoA
FtpGetCurrentDirectoryA
FtpFindFirstFileW
ReadUrlCacheEntryStream
CommitUrlCacheEntryW
RetrieveUrlCacheEntryFileA
DeleteUrlCacheEntry
FtpFindFirstFileA
GopherOpenFileW
InternetGetLastResponseInfoW
FtpCreateDirectoryA
InternetCanonicalizeUrlW
InternetSetOptionA
FindFirstUrlCacheEntryExA
FtpPutFileA
InternetGetConnectedState
InternetSetStatusCallback
InternetGetCookieW
HttpSendRequestExA
InternetSetCookieA
FtpDeleteFileA
GetUrlCacheEntryInfoExW
CreateUrlCacheGroup
HttpAddRequestHeadersW
FindFirstUrlCacheEntryA
HttpSendRequestW
InternetQueryOptionW
InternetGoOnline
UnlockUrlCacheEntryStream
InternetConnectW
InternetConnectA
GetUrlCacheEntryInfoW
GopherGetAttributeA
UnlockUrlCacheEntryFile
InternetCheckConnectionW
CreateUrlCacheEntryW
FindNextUrlCacheEntryA
FtpSetCurrentDirectoryA
InternetSetDialState
InternetOpenUrlW
InternetGetCookieA
GopherFindFirstFileA
InternetConfirmZoneCrossing
InternetWriteFile
SetUrlCacheEntryInfoW
InternetAttemptConnect
RetrieveUrlCacheEntryFileW
FindCloseUrlCache
InternetQueryDataAvailable
InternetCanonicalizeUrlA
HttpQueryInfoW
GopherOpenFileA
DeleteUrlCacheGroup
InternetCrackUrlW
InternetDial
GopherGetLocatorTypeW
InternetOpenA
InternetLockRequestFile
HttpQueryInfoA
InternetCloseHandle
HttpAddRequestHeadersA
FtpRenameFileA
FindNextUrlCacheEntryW
InternetCheckConnectionA
FtpOpenFileA
FtpOpenFileW
FtpDeleteFileW
InternetSetOptionExW
GopherFindFirstFileW
GopherCreateLocatorW
GopherCreateLocatorA
GopherGetAttributeW
InternetFindNextFileW
Sections
.text Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE