Static task
static1
Behavioral task
behavioral1
Sample
878b656849b4682fdb917ace3c02177d786e311b5eec81f0c44f746db6960d40.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
878b656849b4682fdb917ace3c02177d786e311b5eec81f0c44f746db6960d40.exe
Resource
win10v2004-20220812-en
General
-
Target
878b656849b4682fdb917ace3c02177d786e311b5eec81f0c44f746db6960d40
-
Size
879KB
-
MD5
1c01f717c2e18b81329898a4b5ec1640
-
SHA1
1d7fdd69bd11f1f37bc815081c6989f357b1dece
-
SHA256
878b656849b4682fdb917ace3c02177d786e311b5eec81f0c44f746db6960d40
-
SHA512
a32433095b9cc713c48a79a75c2e49525d6c1aa55302b5ee12d337618c2e9ce50bb8d2e23d2185bcc8970036e6b10b05f414546c308f93b5abb5cb9f50aabcca
-
SSDEEP
12288:mYEmehc7YjXpstASJtOAwN9L+RQnPLfDaNyCpa/pND+dplYBGNhcvGP1Nf:ma65stPtORN9y0LfDagCUnbpGP7
Malware Config
Signatures
Files
-
878b656849b4682fdb917ace3c02177d786e311b5eec81f0c44f746db6960d40.exe windows x86
b5a4abba5acb14a223351bfbd581f869
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFlags
CloseHandle
GetFileTime
DeleteFileA
GetModuleFileNameW
IsDebuggerPresent
CreateFileW
GetDriveTypeW
GetConsoleTitleA
GetStartupInfoA
CloseHandle
DeviceIoControl
HeapCreate
lstrlenA
FindClose
CreateFileMappingW
Sleep
GetCommandLineA
GetModuleHandleA
LocalSize
user32
CallWindowProcW
DispatchMessageA
DrawTextW
IsWindow
GetWindowLongW
DestroyMenu
IsZoomed
DestroyWindow
DispatchMessageA
PeekMessageA
GetIconInfo
LoadImageA
BeginPaint
dpwsockx
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
imagehlp
ImageUnload
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ