_ExitWindowsExExitWindowsEx@0
Static task
static1
Behavioral task
behavioral1
Sample
78e22bc1026825564636a814410685fb9f9357f8984af3406ba6b32f1a378ab1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78e22bc1026825564636a814410685fb9f9357f8984af3406ba6b32f1a378ab1.exe
Resource
win10v2004-20220812-en
General
-
Target
78e22bc1026825564636a814410685fb9f9357f8984af3406ba6b32f1a378ab1
-
Size
175KB
-
MD5
b4168256351642a16762e562a6f5188f
-
SHA1
b8af9ab0e0383ad4d5fa0d909e61e931d4a09f8a
-
SHA256
78e22bc1026825564636a814410685fb9f9357f8984af3406ba6b32f1a378ab1
-
SHA512
b524040ac05738cb188d2d31bf6546193846bbfe07b03fbd02a43c0bc02305bba0824d33f6ca54af61b0f159d0113f83ce00c0be3196b5291bbb8c0c4146e2e7
-
SSDEEP
3072:u9SNNGZhoXtFSFiiWcoMOeTnwD93C3RTYnroVWIXx+5eQf6E78M66U9u5:u9SwhoLeKOtzwDFmTYUWoA5eYIcU
Malware Config
Signatures
Files
-
78e22bc1026825564636a814410685fb9f9357f8984af3406ba6b32f1a378ab1.exe windows x86
68494bfb8edba9f25327675a9d26c4a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDialogBaseUnits
GrayStringW
CreateMenu
IsWindow
DeferWindowPos
GetDesktopWindow
GetMenuState
SendNotifyMessageW
GetForegroundWindow
AppendMenuW
CloseDesktop
IsZoomed
kernel32
GetModuleHandleA
GetOEMCP
PulseEvent
CreateThread
CreateDirectoryA
GetFileInformationByHandle
SetNamedPipeHandleState
lstrcmpiA
psapi
QueryWorkingSet
shlwapi
PathUnmakeSystemFolderA
advapi32
RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA
Exports
Exports
Sections
.text Size: 137KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ