Static task
static1
Behavioral task
behavioral1
Sample
1849943faa5b09dc6e68cd8dad63cf31fe47df9d275d0452959167e1513fe95b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1849943faa5b09dc6e68cd8dad63cf31fe47df9d275d0452959167e1513fe95b.exe
Resource
win10v2004-20220812-en
General
-
Target
1849943faa5b09dc6e68cd8dad63cf31fe47df9d275d0452959167e1513fe95b
-
Size
767KB
-
MD5
0632e4a2e4afb4bad06cd995da5431ad
-
SHA1
a5aa7fc82aba4e7b1069d9051cea11ed86e8deb8
-
SHA256
1849943faa5b09dc6e68cd8dad63cf31fe47df9d275d0452959167e1513fe95b
-
SHA512
eef7c4aa7d5ced37864ad8ef5b8490c259786366bdc804ef3cbc3429c86e280db5010ae159fdac47b6919139d1f618da90c9362aeddd1b59fe56bf927f600883
-
SSDEEP
12288:q0ViS+aqDKK5jm+2Xvf7goJoENqr2jpWnsdBVuHi1gGa2mEOWRmfDuIE4Rp:riSLqGZXvf7jJBqr2j+AUi1a2mhCmfDp
Malware Config
Signatures
Files
-
1849943faa5b09dc6e68cd8dad63cf31fe47df9d275d0452959167e1513fe95b.exe windows x86
5a466c3808f65fd1675ce0bd55cea6b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryW
SetLastError
GetStartupInfoA
CreateFileMappingW
GetFileSize
GetVersion
CreateFileA
DeleteFileA
CreatePipe
GetCommandLineW
MapViewOfFile
SetLastError
CreateDirectoryW
HeapSize
VirtualProtect
ReleaseSemaphore
OpenEventW
RemoveDirectoryW
LoadLibraryA
ReleaseMutex
CreateMutexA
HeapDestroy
lstrlenA
FatalExit
GetStdHandle
uxtheme
GetThemeTextExtent
DrawThemeEdge
GetThemeSysSize
GetThemeBool
CloseThemeData
CloseThemeData
OpenThemeData
IsThemeActive
GetThemeColor
DrawThemeBackground
GetThemeTextMetrics
GetWindowTheme
SetWindowTheme
iernonce
RunOnceExProcess
InitCallback
RunOnceExProcess
InitCallback
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE