Static task
static1
Behavioral task
behavioral1
Sample
f78bc1363d5b408df1cca0a633a46c36dbb7a4a3eb226a5eadc0b6d3448b387e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f78bc1363d5b408df1cca0a633a46c36dbb7a4a3eb226a5eadc0b6d3448b387e.exe
Resource
win10v2004-20220812-en
General
-
Target
f78bc1363d5b408df1cca0a633a46c36dbb7a4a3eb226a5eadc0b6d3448b387e
-
Size
809KB
-
MD5
82f69e87d870be9e493ca02a4a39b0a3
-
SHA1
0293ecd8d440722ccf80566c39f9a219417423a2
-
SHA256
f78bc1363d5b408df1cca0a633a46c36dbb7a4a3eb226a5eadc0b6d3448b387e
-
SHA512
bb92c3b3d8e2016e614b47049f2ee39909db8cd6b085de945a394e37429704b8f0da70b805157f48fc4f77b53704294b2f9b28cb2be48a6e48971cdf8fb48313
-
SSDEEP
12288:6dOvNN6uajjoMaIj37TnktlVoIMZVhqbi2ZTSRwe9Tx0ptiCXBfxtficJcYXHQ8Z:cOFNWQvAT4lSZTue/da1VxtZP3Qi
Malware Config
Signatures
Files
-
f78bc1363d5b408df1cca0a633a46c36dbb7a4a3eb226a5eadc0b6d3448b387e.exe windows x86
09622eb81e49977da3537a7f76e0fe42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CreateDirectoryA
GetFileSize
EnterCriticalSection
CreateFileA
WriteConsoleW
ReadConsoleW
OpenSemaphoreW
CreateDirectoryW
GetStartupInfoA
VirtualProtect
TlsGetValue
CloseHandle
OpenMutexA
GetModuleFileNameA
GetCommandLineA
LoadLibraryA
SetLastError
GlobalFree
GetEnvironmentStringsW
SetLastError
GetTickCount
RemoveDirectoryA
lstrlenA
Sleep
user32
DispatchMessageA
CallWindowProcA
DrawTextA
DestroyMenu
IsWindow
PeekMessageA
FindWindowW
SetFocus
IsWindowEnabled
GetWindowLongA
DispatchMessageA
GetSysColor
GetClassInfoA
cmutil
??1CIniA@@QAE@XZ
??_FCIniA@@QAEXXZ
??_FCIniW@@QAEXXZ
??1CIniW@@QAE@XZ
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE