EesIwysullstetwlssi
Static task
static1
Behavioral task
behavioral1
Sample
78ca163faaf58692b087b6375bd009b0N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
78ca163faaf58692b087b6375bd009b0N.dll
Resource
win10v2004-20240709-en
General
-
Target
78ca163faaf58692b087b6375bd009b0N.exe
-
Size
2.7MB
-
MD5
78ca163faaf58692b087b6375bd009b0
-
SHA1
f21d249a8ee9b2dcd14a7bf98e159959c4c35ae5
-
SHA256
4c2b5ecf2e81c7c957522cd5eeaedc27da9e29dd99b123aead31f56e41614969
-
SHA512
ac5aa71f3d868b1dea2652d345a90d043e98f26e24f4d34639132bd5ca64a26d632bb159fa50339b448985fde9e070c8a65bed4f0d5f14404eb5d96363eba7c2
-
SSDEEP
49152:jLC8uwRZFqnrf2F6bdjiC5KRcQcXX5DEbWvB2I15oh268YXZ8+ROWv:j9S91iC/ZtvB715oUr63
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78ca163faaf58692b087b6375bd009b0N.exe
Files
-
78ca163faaf58692b087b6375bd009b0N.exe.dll windows:5 windows x86 arch:x86
d733d1018c14a985447f0b55734b737c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
SetServiceObjectSecurity
kernel32
SetCommState
GetBinaryTypeA
LoadLibraryW
RtlUnwind
TerminateProcess
GetCurrentProcess
GetStringTypeW
SetUnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameA
UnhandledExceptionFilter
user32
GetWindowRect
SetWindowPos
GetMenuItemRect
gdi32
SetSystemPaletteUse
GetLayout
GdiSetBatchLimit
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXP Size: 4KB - Virtual size: 89B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 216KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i5 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ