Static task
static1
Behavioral task
behavioral1
Sample
cd78d65462395a822eae035c0c39e9949f12fc5fc68a755f3138ddd0ee8832c8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd78d65462395a822eae035c0c39e9949f12fc5fc68a755f3138ddd0ee8832c8.exe
Resource
win10v2004-20220901-en
General
-
Target
cd78d65462395a822eae035c0c39e9949f12fc5fc68a755f3138ddd0ee8832c8
-
Size
317KB
-
MD5
37e6ad87703250f8226ded356c07d753
-
SHA1
6a30836c66ed99f6a9db8bc0cfa0916d67a2a5a0
-
SHA256
cd78d65462395a822eae035c0c39e9949f12fc5fc68a755f3138ddd0ee8832c8
-
SHA512
b7f46d6588211b74f6b84d99c2285845498a860a84e2fde9eb9007a4174f34a3d46a0dbe448c7cc947421a39b9ee7c455763c1778bbfd0cefb5e6d1c1c4ebca8
-
SSDEEP
6144:Mbi1UZvfVobjP/nI3cgfpS9oLw74F2ezIwPk8C2hGZMYYy:MYUZvdkbI3ccS/E2ezIwc8nYYy
Malware Config
Signatures
Files
-
cd78d65462395a822eae035c0c39e9949f12fc5fc68a755f3138ddd0ee8832c8.exe windows x86
25c10713e15cd16f31dfdb95abcaecbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
EnterCriticalSection
GetLocaleInfoA
VirtualProtect
FileTimeToLocalFileTime
GlobalFree
CloseHandle
LoadLibraryExA
InterlockedExchange
LockResource
SetConsoleOutputCP
GetLastError
GetStdHandle
HeapCreate
GetDriveTypeA
GlobalDeleteAtom
Sleep
RaiseException
SetErrorMode
GetACP
GlobalAddAtomA
user32
SetForegroundWindow
GetWindow
GetParent
GetFocus
DrawEdge
ClipCursor
ShowWindow
OemToCharA
GetMenuItemInfoA
GetActiveWindow
ReleaseDC
GetCursorPos
DrawTextA
BeginPaint
GetWindowTextA
IsIconic
EndPaint
ValidateRect
GetClassNameA
ntdsapi
DsCrackNamesA
DsIsMangledDnA
DsBindA
DsFreeNameResultA
DsGetSpnA
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ