Static task
static1
Behavioral task
behavioral1
Sample
78ebf40679ec5b3fefd4ce7fed8b5e332526e50cdb6a71688de3e859f264b0fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78ebf40679ec5b3fefd4ce7fed8b5e332526e50cdb6a71688de3e859f264b0fb.exe
Resource
win10v2004-20220901-en
General
-
Target
78ebf40679ec5b3fefd4ce7fed8b5e332526e50cdb6a71688de3e859f264b0fb
-
Size
747KB
-
MD5
63947a1f0aaf0d41842730e02f469016
-
SHA1
966a19f0c6b52d8fe8ce0d848bf9d914d24a1b46
-
SHA256
78ebf40679ec5b3fefd4ce7fed8b5e332526e50cdb6a71688de3e859f264b0fb
-
SHA512
3ce3031a961461afec936ee01c09a150a79c959796d04db042da10a6614141364b6706f1f4c1e339039cd64cc4e7f6f4e4613b3f437342d7cf298ee678f17a80
-
SSDEEP
12288:sh7SMn4mkN54O+czygy249gc1Hs5RHYlYv386puRBXEe9y8/+oPm3l/0noQtvqEu:G7SM4dNmizyHe8HszHYlKRuF9y/oPm1B
Malware Config
Signatures
Files
-
78ebf40679ec5b3fefd4ce7fed8b5e332526e50cdb6a71688de3e859f264b0fb.exe windows x86
03ba42c65c56635194c18eda112f9e16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
SetVolumeLabelA
GetCommandLineA
GetDriveTypeW
FindAtomA
ClearCommBreak
AddAtomA
FatalExit
RemoveDirectoryA
GetModuleHandleA
DeleteAtom
CreatePipe
GetCurrentDirectoryW
WriteFile
IsBadWritePtr
CreateDirectoryA
GetCurrentThreadId
CloseHandle
HeapFree
CreateSemaphoreA
GetModuleFileNameA
WaitForMultipleObjects
RemoveDirectoryA
GetFileType
HeapCreate
cryptui
WizardFree
LocalEnrollNoDS
CryptUIDlgFreeCAContext
DllRegisterServer
CryptUIWizImport
WizardFree
DllUnregisterServer
CryptUIDlgViewContext
CryptUIWizDigitalSign
CryptUIWizBuildCTL
LocalEnroll
CryptUIStartCertMgr
CryptUIWizExport
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE