Static task
static1
Behavioral task
behavioral1
Sample
78e1c989f15594e879576f20c5d80abab4f1a0dc71d5d068911ea329bd753169.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78e1c989f15594e879576f20c5d80abab4f1a0dc71d5d068911ea329bd753169.exe
Resource
win10v2004-20220812-en
General
-
Target
78e1c989f15594e879576f20c5d80abab4f1a0dc71d5d068911ea329bd753169
-
Size
208KB
-
MD5
ed8917b3aa317bdb666773562debf323
-
SHA1
69af0217dd58a44866dbc96f5b4ba3557f535139
-
SHA256
78e1c989f15594e879576f20c5d80abab4f1a0dc71d5d068911ea329bd753169
-
SHA512
5d3069c1c1c8a31522955d8aecf3182183bec6ab61057d6ac84f67bf02dc7a943017bd91988462ba4a599ef2fdc7cf4afda8f97049428c03b8acce5d1540bde3
-
SSDEEP
3072:TlkBGt7ZbMh2X57fJWQeAPAIF7UIkNs8oOTDfTwqE4goXb71i+XDRmPDTKgFD:Ti0ty0X5bJrJVAIka8X+zoXpyF
Malware Config
Signatures
Files
-
78e1c989f15594e879576f20c5d80abab4f1a0dc71d5d068911ea329bd753169.exe windows x86
03f672dbab8705c36c562dec7d5436c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterWindowMessageA
LoadIconA
ReleaseCapture
OffsetRect
EndDialog
CloseClipboard
GetMessageA
BeginDeferWindowPos
DeferWindowPos
CreateMenu
UnregisterHotKey
GetPropA
TranslateMessage
MapDialogRect
ole32
CoInitialize
CLSIDFromString
CoCreateInstance
OleUninitialize
OleInitialize
winspool.drv
DeletePrintProcessorA
DeletePrintProvidorA
DeletePrinter
DeletePrinterConnectionA
DeletePrinterDataExA
EndPagePrinter
EnumFormsA
EnumJobsA
EnumMonitorsA
EnumPortsA
EnumPrintProcessorDatatypesA
EnumPrintProcessorsA
EnumPrinterDataExA
EnumPrinterDataA
EnumPrinterDriversA
EnumPrinterKeyA
DeletePortA
FindClosePrinterChangeNotification
GetPrinterDriverDirectoryA
GetPrinterDriverA
GetPrinterA
OpenPrinterA
PrinterMessageBoxA
ReadPrinter
ResetPrinterA
ScheduleJob
SetFormA
SetJobA
SetPortA
SetPrinterDataExA
SetPrinterDataA
WaitForPrinterChange
WritePrinter
XcvDataW
DeleteMonitorA
DeleteFormA
ConfigurePortA
AddPrinterDriverA
AddPrinterDriverExA
AddPrinterConnectionA
AddPrintProvidorA
AddPrintProcessorA
AddPortA
AddMonitorA
AddJobA
AddFormA
AbortPrinter
EnumPrintersA
kernel32
QueryPerformanceFrequency
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetTimeZoneInformation
GetSystemInfo
LoadLibraryA
GetOEMCP
GetACP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
VirtualQuery
InterlockedExchange
HeapSize
RtlUnwind
InitializeCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
IsBadWritePtr
HeapReAlloc
HeapFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetLastError
GetCurrentThreadId
SetLastError
TlsAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
GetVersionExA
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
WriteConsoleW
VirtualProtect
AddConsoleAliasA
LoadLibraryExA
GetNativeSystemInfo
ExpandEnvironmentStringsA
GetDriveTypeA
GetVolumeInformationA
IsBadReadPtr
SetErrorMode
GlobalFree
GlobalAlloc
GlobalLock
FlushFileBuffers
CreateEventA
LocalFree
LocalAlloc
GetSystemTimeAsFileTime
GetProcessHeap
GetLocalTime
CreateFileA
CreateDirectoryA
DeleteFileA
ResetEvent
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ