Static task
static1
Behavioral task
behavioral1
Sample
78b5db65c61298383ae781ee00644e2110eab62556a7c069d7f1a4a92d807f41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78b5db65c61298383ae781ee00644e2110eab62556a7c069d7f1a4a92d807f41.exe
Resource
win10v2004-20220812-en
General
-
Target
78b5db65c61298383ae781ee00644e2110eab62556a7c069d7f1a4a92d807f41
-
Size
281KB
-
MD5
1a9c7c1a89b9e5d0d3d11c142a779ad0
-
SHA1
098213494769fecabe3f4e0657a33efad84da3d2
-
SHA256
78b5db65c61298383ae781ee00644e2110eab62556a7c069d7f1a4a92d807f41
-
SHA512
2a617c12ba85aecb67cf8907196fd65021bba2d24fb55a69ef928a59636b275494e171a524e60d4ffeac54788e4209be6a251af7ef3d3162f2996c3d7d469e80
-
SSDEEP
6144:afYgpM/DrdT2aL8FzvSt1fnBbBET2L1DFj+u+gx7HAil:eqDRVLUzWBBbqiDj+utZX
Malware Config
Signatures
Files
-
78b5db65c61298383ae781ee00644e2110eab62556a7c069d7f1a4a92d807f41.exe windows x86
3c43d97aa6776e148c42f0adb882457a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharAlphaNumericW
EndDialog
EnumDesktopsA
SetWindowPos
ValidateRect
SetWindowTextA
DialogBoxParamA
OemKeyScan
GetActiveWindow
SetPropA
ole32
CoFreeLibrary
CoUnmarshalHresult
OleFlushClipboard
kernel32
GetCurrentThreadId
CopyFileW
CreateProcessW
SizeofResource
AddAtomW
DeleteAtom
HeapDestroy
GetStartupInfoA
LocalAlloc
InitializeSListHead
LocalFree
InterlockedExchangeAdd
GetProcAddress
LoadLibraryExW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sections
.text Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ