Static task
static1
Behavioral task
behavioral1
Sample
78735e2eeff34656a279d8adde2159418a3c471bc3c1da6852f69158a0cbf9e0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78735e2eeff34656a279d8adde2159418a3c471bc3c1da6852f69158a0cbf9e0.exe
Resource
win10v2004-20221111-en
General
-
Target
78735e2eeff34656a279d8adde2159418a3c471bc3c1da6852f69158a0cbf9e0
-
Size
33KB
-
MD5
ada5d2d02c60bac115368a7907c13a0b
-
SHA1
8ba09524f7c667aa19bf1d102e8d214e14e78b70
-
SHA256
78735e2eeff34656a279d8adde2159418a3c471bc3c1da6852f69158a0cbf9e0
-
SHA512
795b55d8a3db27caa9b5555e93a5966604af8503d6a3bad776ad802428812aec27478b3da43ed03c9724369fb7c08e968bd7edadd40c581d1c8973f0a65c0a73
-
SSDEEP
384:4Ad9037IHuRubXBR16beaOSNYdgM95yqvZUcP/6J:Z900uRubXBj6qaJ66385PiJ
Malware Config
Signatures
Files
-
78735e2eeff34656a279d8adde2159418a3c471bc3c1da6852f69158a0cbf9e0.exe windows x86
9cb60fcfb99dbadd338c9e41cea569c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamW
CreateDesktopW
wsprintfA
DispatchMessageA
LoadImageA
GetClassInfoA
IsCharLowerA
PostMessageW
SetCursorPos
PeekMessageA
MessageBoxW
crypt32
CertDuplicateStore
CryptEnumOIDInfo
CertControlStore
CertFindExtension
CertGetNameStringA
CertCompareCertificate
CertDuplicateCRLContext
CertAddStoreToCollection
CertFindChainInStore
CertSaveStore
CryptFindOIDInfo
CertFindAttribute
CertNameToStrA
CertCloseStore
CertCreateCRLContext
CertOpenStore
CertFindCRLInStore
kernel32
CopyFileW
lstrcpynW
GetLocalTime
WaitForSingleObjectEx
GetStartupInfoA
OpenMutexW
FindFirstFileA
GetProcAddress
GetProcessHeap
SetEnvironmentVariableW
GetModuleHandleA
GetGeoInfoA
GetVolumePathNameA
GetLastError
GetCurrentDirectoryW
SetErrorMode
FileTimeToSystemTime
OpenSemaphoreA
lstrcmpiA
GetShortPathNameA
WriteConsoleW
DeviceIoControl
FormatMessageA
TlsGetValue
GetEnvironmentVariableA
GetShortPathNameA
CreateDirectoryA
ReplaceFileW
OpenSemaphoreA
SetEnvironmentVariableA
dciman32
DCICloseProvider
DCICreateOverlay
DCIBeginAccess
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ