Static task
static1
Behavioral task
behavioral1
Sample
2666202d149948c12c47bdc7358360bd5f298026e1eaa49b82c62a3eaa0d6c28.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2666202d149948c12c47bdc7358360bd5f298026e1eaa49b82c62a3eaa0d6c28.exe
Resource
win10v2004-20220812-en
General
-
Target
2666202d149948c12c47bdc7358360bd5f298026e1eaa49b82c62a3eaa0d6c28
-
Size
296KB
-
MD5
70e01aa9a73d8838086e798c9460fac0
-
SHA1
d8acbdba0d186a2f833e888c3e6752db48a3808b
-
SHA256
2666202d149948c12c47bdc7358360bd5f298026e1eaa49b82c62a3eaa0d6c28
-
SHA512
50725925b176f617f04162d10cfc9a8d8692d0118b3e051c9f08721e08cb040aa940cfee7559c690d085d15a2e44406cdd44d7b695d521491d4e3bc919fd1757
-
SSDEEP
6144:E30NH00bUObq2lt/y342gneuwg9Skh0tsqqVmiqh+ZZN+sJFcTO/55l:DfYY7/y3Ine0xmsjtqhwPVwW
Malware Config
Signatures
Files
-
2666202d149948c12c47bdc7358360bd5f298026e1eaa49b82c62a3eaa0d6c28.exe windows x86
8d9b3eda6d7bc070e21ae338a7f2e847
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetProcessHeap
DeleteFileA
CancelIo
WriteConsoleW
GetCommandLineA
GetDriveTypeW
SetEvent
lstrcpyA
GetModuleHandleA
AddAtomW
WriteConsoleW
lstrlenW
GetFileAttributesA
VirtualQuery
GetPrivateProfileSectionW
WriteConsoleW
HeapDestroy
GetStartupInfoA
Sleep
CopyFileA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
uxtheme
OpenThemeData
GetThemeTextExtent
GetThemeColor
DrawThemeBackground
GetThemeSysSize
GetThemeTextMetrics
CloseThemeData
SetWindowTheme
IsThemeActive
DrawThemeEdge
GetWindowTheme
CloseThemeData
GetThemeBool
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ