Static task
static1
Behavioral task
behavioral1
Sample
9ac70d40024834cce34755d37dc4dafc7bad0dac81848a487942e6a819777c57.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ac70d40024834cce34755d37dc4dafc7bad0dac81848a487942e6a819777c57.exe
Resource
win10v2004-20220901-en
General
-
Target
9ac70d40024834cce34755d37dc4dafc7bad0dac81848a487942e6a819777c57
-
Size
296KB
-
MD5
71d90bdcbc46d93e096b3abfcb813ed0
-
SHA1
0a7f712ce847917f2e50d6366c44d5f4eaaa3dc8
-
SHA256
9ac70d40024834cce34755d37dc4dafc7bad0dac81848a487942e6a819777c57
-
SHA512
28923463fa873c4c76eede6e607693d9fe3707644be39ba599aea5398a6eeb69ca7180ca4110f14c753fd0328df01d9805ccc30e3b9be57032c938245a11329f
-
SSDEEP
6144:v0ESdq2FG0ZD/y8eOHbL5duOMOQCn/+M3vb6XpqCCWHCM:v0tnZD/MOhdurHvM3vuXprvz
Malware Config
Signatures
Files
-
9ac70d40024834cce34755d37dc4dafc7bad0dac81848a487942e6a819777c57.exe windows x86
8b866d09d50468148c8258356718097b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
WriteConsoleW
CopyFileA
DeleteFileA
CancelIo
Sleep
GetCommandLineA
WriteConsoleW
HeapDestroy
GetStartupInfoA
lstrlenW
lstrcpyA
GetDriveTypeW
AddAtomW
HeapSize
WriteConsoleW
GetFileAttributesA
GetProcessHeap
LoadLibraryW
GetPrivateProfileSectionW
VirtualProtect
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
uxtheme
DrawThemeEdge
SetWindowTheme
OpenThemeData
GetThemeBool
IsThemeActive
GetWindowTheme
DrawThemeBackground
GetThemeTextMetrics
GetThemeColor
GetThemeTextExtent
GetThemeSysSize
CloseThemeData
CloseThemeData
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE