Static task
static1
Behavioral task
behavioral1
Sample
78913bb22fde634c51e4afd53345465d423759b0eb308a53d729dec97ee8fcf8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78913bb22fde634c51e4afd53345465d423759b0eb308a53d729dec97ee8fcf8.exe
Resource
win10v2004-20220901-en
General
-
Target
78913bb22fde634c51e4afd53345465d423759b0eb308a53d729dec97ee8fcf8
-
Size
812KB
-
MD5
1e654d8f4c15a205ab090a435f68a1d0
-
SHA1
a66cf27992f5291746f2f8973a3ab3e24fb4e7e7
-
SHA256
78913bb22fde634c51e4afd53345465d423759b0eb308a53d729dec97ee8fcf8
-
SHA512
50db7981d7d7a800aaa99d1320a26e16ed45655be8d5243fe807f74a5476db5838b8bded2b70c595bcf4471c6c96c0edbe98c1f6b3f4c0ecc438915d45e2476f
-
SSDEEP
24576:c5Ph9S6ixFxfGqdHJ6AEeKo9v0l/I3sS0yu:2PLSTFd/J6PeKoM/Ic
Malware Config
Signatures
Files
-
78913bb22fde634c51e4afd53345465d423759b0eb308a53d729dec97ee8fcf8.exe windows x86
2255e65e00ef3c0429bcd644297d0bf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
CloseHandle
GetEnvironmentVariableA
FindVolumeClose
lstrlenW
FileTimeToSystemTime
GetCommandLineA
WriteConsoleA
GetStartupInfoA
GetCommandLineA
EnumResourceTypesW
SetLastError
CreateSemaphoreA
HeapCreate
SuspendThread
GetModuleHandleA
CloseHandle
DeleteFileA
Sleep
OpenEventA
advapi32
RegEnumKeyA
RegDeleteValueA
CreateServiceW
IsValidSid
CloseEventLog
RegCreateKeyExW
IsValidSid
IsValidSid
IsValidSid
ControlService
IsValidAcl
InitializeSid
IsValidSid
ddrawex
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 806KB - Virtual size: 805KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ