Static task
static1
Behavioral task
behavioral1
Sample
78afe9b7d909892292ccfd2c9105f5d4884d36907fba75fb7d244711b8b7a059.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78afe9b7d909892292ccfd2c9105f5d4884d36907fba75fb7d244711b8b7a059.exe
Resource
win10v2004-20220812-en
General
-
Target
78afe9b7d909892292ccfd2c9105f5d4884d36907fba75fb7d244711b8b7a059
-
Size
303KB
-
MD5
78f6cb74e9bc3283c6857dca0906aeca
-
SHA1
4c5e2662025969d9118ab1378a0e0701b34840fa
-
SHA256
78afe9b7d909892292ccfd2c9105f5d4884d36907fba75fb7d244711b8b7a059
-
SHA512
e15683f7c9fbcd40343bf4c4b6e87361f148fbef786345afd478be81e93a4d5b723ab43248f596789f926ec5792de6c36af7bb1211df75dfccda2ad4291fc762
-
SSDEEP
6144:qZ/QPWbEWevnh53Sg1DlaF1m/llfG9LlhzFgxSX2F:0bovhOF1m/e5cx
Malware Config
Signatures
Files
-
78afe9b7d909892292ccfd2c9105f5d4884d36907fba75fb7d244711b8b7a059.exe windows x86
d1d2cb94fde9b9d5229f0b7bdabb9a88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
ReadFile
ExitProcess
DeleteFileW
GetVersion
WaitForSingleObject
GetFileType
EnterCriticalSection
CreateFileA
Sleep
GetFileTime
RemoveDirectoryA
GetCommandLineA
FindAtomW
IsBadReadPtr
CloseHandle
SetFileAttributesW
VirtualAlloc
SetLastError
GetEnvironmentVariableW
HeapSize
SetLastError
SuspendThread
GetModuleHandleA
GetFileAttributesA
cryptui
LocalEnrollNoDS
CryptUIWizImport
CryptUIWizDigitalSign
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIDlgSelectStoreA
CryptUIDlgFreeCAContext
DllUnregisterServer
CryptUIDlgViewContext
DllRegisterServer
CryptUIWizExport
LocalEnroll
CryptUIDlgFreeCAContext
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ