Static task
static1
Behavioral task
behavioral1
Sample
4fc009813989908e27cc41d56da478e6dc19ed712f13e4979104c33de2bce412.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4fc009813989908e27cc41d56da478e6dc19ed712f13e4979104c33de2bce412.exe
Resource
win10v2004-20220812-en
General
-
Target
4fc009813989908e27cc41d56da478e6dc19ed712f13e4979104c33de2bce412
-
Size
291KB
-
MD5
662f695c24a8916144d73fc6e5513250
-
SHA1
129b7f297afbcf4a6d6008497165364f9214a215
-
SHA256
4fc009813989908e27cc41d56da478e6dc19ed712f13e4979104c33de2bce412
-
SHA512
7b62a2568ca0b3a726e558f57ec89d93b3b6b9a155a5b16963b771b6a95c967ff3992957c3a5ff09b523dbe8891ed58949d1e824acdfd52638cd17b9c5d0de0f
-
SSDEEP
6144:B880bF1U6yqPw7biaOyGXe/2Zj7l36/hUqy4HOL8:B4J1JwKvW/2h7lonzO
Malware Config
Signatures
Files
-
4fc009813989908e27cc41d56da478e6dc19ed712f13e4979104c33de2bce412.exe windows x86
bd5ee059e0263431c82fbae529988cf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
SetEvent
CopyFileA
VirtualProtect
WriteConsoleW
GetDriveTypeW
GetPrivateProfileSectionW
VirtualQueryEx
GetProcessHeap
WriteConsoleW
DeleteFileA
Sleep
GetStartupInfoA
WriteConsoleW
HeapDestroy
GetModuleHandleA
GetFileAttributesA
AddAtomW
CancelIo
GetCommandLineA
lstrlenW
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
uxtheme
IsThemeActive
SetWindowTheme
GetThemeTextMetrics
DrawThemeEdge
GetThemeTextExtent
CloseThemeData
DrawThemeBackground
OpenThemeData
GetWindowTheme
GetThemeBool
GetThemeColor
CloseThemeData
GetThemeSysSize
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ