Static task
static1
Behavioral task
behavioral1
Sample
78e00ace4055b37493ca43d5dd647501e8018fcadfc01bae9328f159c5d6fa13.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78e00ace4055b37493ca43d5dd647501e8018fcadfc01bae9328f159c5d6fa13.exe
Resource
win10v2004-20221111-en
General
-
Target
78e00ace4055b37493ca43d5dd647501e8018fcadfc01bae9328f159c5d6fa13
-
Size
189KB
-
MD5
4514239a16fefe093fe4697f1f875d83
-
SHA1
6d57b673e7dd3e2d9916503f89b89a9cecf27e47
-
SHA256
78e00ace4055b37493ca43d5dd647501e8018fcadfc01bae9328f159c5d6fa13
-
SHA512
81bffae7e2e7505be65a37cd7899cfeb0682cb9a51579b526e5c2c5f10d649c80d045c11d93b653f42f8774f349e47d4e5436e59ff7a8e2ad21fa5c52992dbf2
-
SSDEEP
3072:3CRUOuW6TtFoIoYx5NWkvFIjsFxO/ltmB37tMDCN8BJj4ALUo:+3uhtFo/YBWkvFpUaBrtMONu
Malware Config
Signatures
Files
-
78e00ace4055b37493ca43d5dd647501e8018fcadfc01bae9328f159c5d6fa13.exe windows x86
7e4c1118537daaf22670cfb2e918ef57
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfoExW
FreeLibraryAndExitThread
_lwrite
GetTimeZoneInformation
HeapAlloc
CreateHardLinkW
GetLocaleInfoA
SetCriticalSectionSpinCount
lstrcmpW
BuildCommDCBW
ReadConsoleOutputCharacterW
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetLastError
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
ReadFile
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ