Static task
static1
Behavioral task
behavioral1
Sample
78c7cdbcd613d11f85e2489e023423fb80f6f68c264c247e0c07561abfcfc57e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78c7cdbcd613d11f85e2489e023423fb80f6f68c264c247e0c07561abfcfc57e.exe
Resource
win10v2004-20220901-en
General
-
Target
78c7cdbcd613d11f85e2489e023423fb80f6f68c264c247e0c07561abfcfc57e
-
Size
394KB
-
MD5
689e45bdc0886c93e8e3b3e8cb8752f0
-
SHA1
d209d7290cff1939f1aee41d432d4e5832d4b720
-
SHA256
78c7cdbcd613d11f85e2489e023423fb80f6f68c264c247e0c07561abfcfc57e
-
SHA512
f5eddcf4f0180a4849770e614751d2e00718be7afef8167f9c2271aeec09926fe5f357120da02c4accc45d089e0a1157af43d180f2190ac333decaa515ce0cae
-
SSDEEP
12288:yNIITXhzL8pHgn301jDEnw82wI2/zL4Z:6xn8pHgn302nw82wlzL4Z
Malware Config
Signatures
Files
-
78c7cdbcd613d11f85e2489e023423fb80f6f68c264c247e0c07561abfcfc57e.exe windows x86
d45ee264ebe0f44c900b2c4274df560c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
RemoveDirectoryW
FatalExit
ReleaseSemaphore
OpenEventW
lstrlenW
HeapSize
DeleteFileA
GetFileSize
GetVersion
GetStdHandle
ReleaseSemaphore
SetLastError
CreateDirectoryW
GetStartupInfoA
MapViewOfFile
CreateFileMappingW
ReleaseMutex
CreateMutexA
SetLastError
GetCommandLineW
HeapDestroy
LoadLibraryA
RemoveDirectoryW
VirtualProtect
cryptui
CryptUIStartCertMgr
CryptUIWizBuildCTL
LocalEnroll
WizardFree
DllUnregisterServer
CryptUIWizImport
CryptUIWizDigitalSign
CryptUIDlgViewContext
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizExport
LocalEnrollNoDS
WizardFree
iernonce
InitCallback
RunOnceExProcess
InitCallback
RunOnceExProcess
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE