Static task
static1
Behavioral task
behavioral1
Sample
78c237326d631ebf2513c84bffe760551c7446bfdefadbd7f8610615a3fad343.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78c237326d631ebf2513c84bffe760551c7446bfdefadbd7f8610615a3fad343.exe
Resource
win10v2004-20220812-en
General
-
Target
78c237326d631ebf2513c84bffe760551c7446bfdefadbd7f8610615a3fad343
-
Size
809KB
-
MD5
c68ed6baea8b6fbacf646b793264b885
-
SHA1
511e0fc8b228b6e5737d434b166b67586c6fc3c8
-
SHA256
78c237326d631ebf2513c84bffe760551c7446bfdefadbd7f8610615a3fad343
-
SHA512
7d4f1c297355086b6f8d3c9e4692ca3a1a7bb07e3dcd9019d518086372c5695bd7dbe8a963aedf98e057cb52faccee3e5806ef4b626c2fc74522a6d0f65cc92f
-
SSDEEP
12288:j5eVO54I3OSBUV58U3RtWPyVWeuw50jMF8NQ/Cvh/GdQx1nIeoZZ27RXYodlkwFF:N8O5j3NUV5DeYv5Iv0deocXLlrL6U/
Malware Config
Signatures
Files
-
78c237326d631ebf2513c84bffe760551c7446bfdefadbd7f8610615a3fad343.exe windows x86
16eb8893c944a62040b1546f942ea391
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
EnterCriticalSection
GetTickCount
CreateFileA
GetStartupInfoA
GetModuleHandleA
CreateDirectoryW
GetFileSize
WriteConsoleW
RemoveDirectoryA
CloseHandle
GetCommandLineW
ReadFile
GetConsoleTitleA
GetConsoleTitleA
GetCalendarInfoA
lstrlenW
TlsGetValue
GetEnvironmentStringsW
CancelIo
DeleteFileA
GetModuleFileNameA
VirtualProtectEx
CancelIo
GlobalFree
user32
CreateIcon
IsWindowVisible
DestroyMenu
DispatchMessageA
GetWindowLongA
GetWindowLongA
GetSysColor
PeekMessageA
MessageBoxA
IsWindowEnabled
wsprintfA
GetClassInfoA
IsWindow
console
CPlApplet
CPlApplet
CPlApplet
CPlApplet
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE