Static task
static1
Behavioral task
behavioral1
Sample
78d5419674bbe5f773698193a6686af7115bf21f3a3ef4d509a2e4479527fbcc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78d5419674bbe5f773698193a6686af7115bf21f3a3ef4d509a2e4479527fbcc.exe
Resource
win10v2004-20221111-en
General
-
Target
78d5419674bbe5f773698193a6686af7115bf21f3a3ef4d509a2e4479527fbcc
-
Size
285KB
-
MD5
dfce3d57c83c019f263d3e8f3c6b8f39
-
SHA1
41d6e29f16b3ad5c6a4afd54633b55dc844d72e2
-
SHA256
78d5419674bbe5f773698193a6686af7115bf21f3a3ef4d509a2e4479527fbcc
-
SHA512
3fd97d32601f68f2f482fe265d27b1a12a1d4b6279e21bb47e0cc4b0d826387e6dc5e8e44add838549405e2e0acdbb8af05d0da74dd4a1fcbc731ec738cb564d
-
SSDEEP
6144:EX6BDomz60SRPgwPiEe3JtKeju6dM00MmxoMul8jX:5D9z60gPs3JXTddmP2c
Malware Config
Signatures
Files
-
78d5419674bbe5f773698193a6686af7115bf21f3a3ef4d509a2e4479527fbcc.exe windows x86
59d0101dfc32dfacba91cb02cebd7f4f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
HeapFree
EncodePointer
HeapDestroy
InterlockedIncrement
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
ExitProcess
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
FindResourceA
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetSystemInfo
LockResource
LoadLibraryA
GetProcAddress
lstrcmpiA
MulDiv
GetSystemPowerStatus
GetDateFormatA
LoadResource
FreeResource
HeapCreate
HeapAlloc
GetLastError
HeapReAlloc
GetStringTypeW
user32
EndPaint
DestroyWindow
GetMessageA
SetWindowRgn
GetWindowRect
RegisterClassExA
PostQuitMessage
FillRect
KillTimer
IsZoomed
DrawTextA
SetForegroundWindow
LoadStringA
GetFocus
LoadBitmapA
LoadIconA
MessageBeep
IsWindowEnabled
GetClientRect
SetFocus
GrayStringA
SetRectEmpty
ShowCaret
BeginPaint
GetDC
TranslateMessage
LockWindowUpdate
SetSysColors
SetRect
IntersectRect
MessageBoxA
SetCursorPos
SystemParametersInfoW
CreateWindowExA
TranslateAcceleratorA
EndDialog
DefWindowProcA
GetDesktopWindow
GetSysColor
GetCursorPos
LoadAcceleratorsA
ShowWindow
GetSysColorBrush
LoadBitmapW
CreateCaret
IsWindow
DispatchMessageA
SystemParametersInfoA
BeginDeferWindowPos
UpdateWindow
EnableWindow
AdjustWindowRect
FindWindowA
LoadCursorA
DialogBoxParamA
CopyRect
gdi32
CreateEllipticRgn
CreatePolygonRgn
MoveToEx
LineTo
SetTextColor
Polygon
CreateFontA
GetDeviceCaps
StretchBlt
SetPixel
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
FillRgn
CreateRectRgn
GetTextMetricsA
SetTextAlign
GetPixel
GetStockObject
ExtTextOutA
TextOutA
GetRgnBox
advapi32
AddAce
IsValidSid
OpenSCManagerA
AddAccessAllowedAce
AllocateAndInitializeSid
AddAccessDeniedAce
InitializeSecurityDescriptor
LookupAccountNameA
EnumServicesStatusA
CloseServiceHandle
InitiateSystemShutdownA
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ