Static task
static1
Behavioral task
behavioral1
Sample
78dfa9518000f7ea6722b6d6a346224c08c429871270e052b4ae9bb020f50483.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78dfa9518000f7ea6722b6d6a346224c08c429871270e052b4ae9bb020f50483.exe
Resource
win10v2004-20221111-en
General
-
Target
78dfa9518000f7ea6722b6d6a346224c08c429871270e052b4ae9bb020f50483
-
Size
48KB
-
MD5
d3672b61860e9306156a3c2249c00959
-
SHA1
aa980df77e07a0702a468f91f6ce6f8a3b8397f0
-
SHA256
78dfa9518000f7ea6722b6d6a346224c08c429871270e052b4ae9bb020f50483
-
SHA512
14ec44de43007cd0fa1d20894d4ebb15422174d4489efa46074d1200254f9c497a72f384eb3011614faf8a4057e23b7d4a4ffcd8f3f77da57712e06e60c65cd3
-
SSDEEP
96:Sa25AYXmlyzR1gJr9OrkdiRdmi/9JGjbHpYp2wNRrRS4nc4n54MHPtboynG7i:OOYWYkdiZlcbWjtbd2UP1oynG7
Malware Config
Signatures
Files
-
78dfa9518000f7ea6722b6d6a346224c08c429871270e052b4ae9bb020f50483.exe windows x86
24c9432e565f6e8d635b364bced380a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
user32
CharUpperA
msvcrt
__p__fmode
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
strchr
strrchr
strlen
toupper
fprintf
strcat
strcpy
memset
fopen
fclose
strcmp
__set_app_type
kernel32
GetStartupInfoA
SetCurrentDirectoryA
CreateProcessA
CreateFileA
GetFileTime
SetFileTime
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
SetFileAttributesA
CopyFileA
GetModuleFileNameA
DeleteFileA
SetSystemTime
Sleep
GetModuleHandleA
GetSystemTime
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE