Static task
static1
Behavioral task
behavioral1
Sample
78c741d316badd305f54a26eaf71889380854452ba193036670e98d629f06566.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78c741d316badd305f54a26eaf71889380854452ba193036670e98d629f06566.exe
Resource
win10v2004-20221111-en
General
-
Target
78c741d316badd305f54a26eaf71889380854452ba193036670e98d629f06566
-
Size
220KB
-
MD5
93998dbaf5a4b0bdcef5b75eec8bd57a
-
SHA1
73518271d08cdbd68bbbd346b6a9e7e939da075e
-
SHA256
78c741d316badd305f54a26eaf71889380854452ba193036670e98d629f06566
-
SHA512
7c2167760960549e53727b409e5b2a1d8c739e411bd663c01a762ba32217da1192c5b27104dbcaa4fe43601b3d0ac92faa97af058efe7e812a90f63f674f15c5
-
SSDEEP
3072:kzgSNdFhlI+ZrD2RB7JvhynmSKGMafEJUDQPH7:kUSlFCnvwnmSBfPQ/7
Malware Config
Signatures
Files
-
78c741d316badd305f54a26eaf71889380854452ba193036670e98d629f06566.exe windows x86
c586d9a39e9639e7cbd68d6ccb067d75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseSemaphore
GetProcAddress
LoadLibraryA
Sleep
VirtualFree
VirtualAlloc
VirtualProtect
GetModuleHandleA
CreateEventA
GetCurrentProcess
GetSystemInfo
GetLocaleInfoA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
FlushFileBuffers
SetFilePointer
CloseHandle
user32
LoadImageA
BeginPaint
LoadCursorA
DestroyWindow
GetParent
EnableWindow
UpdateWindow
ole32
CoInitialize
psapi
GetProcessMemoryInfo
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ