Static task
static1
Behavioral task
behavioral1
Sample
d1a6a2e7f45a1a251da30f526d70dc5a5e35269b02bc5800f4f50c9a5676d9f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1a6a2e7f45a1a251da30f526d70dc5a5e35269b02bc5800f4f50c9a5676d9f3.exe
Resource
win10v2004-20220812-en
General
-
Target
d1a6a2e7f45a1a251da30f526d70dc5a5e35269b02bc5800f4f50c9a5676d9f3
-
Size
113KB
-
MD5
65fd95d410dd1936feb18e4e46519308
-
SHA1
91f51084588cfa5a342ee63e74ab9e2dcb72f4cf
-
SHA256
d1a6a2e7f45a1a251da30f526d70dc5a5e35269b02bc5800f4f50c9a5676d9f3
-
SHA512
705e8c36a1ce4173ae4c530effb9ceb8d807aee50dcb5d4a6c390f81aea45bef20b2974e7caae008d21089db3362946241b6332a6529e9367953f7cd62a929af
-
SSDEEP
3072:p/oEUOHbsU3NRwlrDsVwdGiWrBPTnSXijrM:iEUO7vNOlvsVFlrnSyr
Malware Config
Signatures
Files
-
d1a6a2e7f45a1a251da30f526d70dc5a5e35269b02bc5800f4f50c9a5676d9f3.exe windows x86
b1d9aa326b8ab3c27cb96dc36d9abc09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
GetModuleHandleA
CancelIo
HeapDestroy
AddAtomW
Sleep
CopyFileA
SetEvent
GetStartupInfoA
DeleteFileA
lstrcpyA
GetPrivateProfileSectionW
VirtualQueryEx
lstrlenW
VirtualProtect
GetDriveTypeW
GetProcessHeap
WriteConsoleW
GetFileAttributesA
WriteConsoleW
WriteConsoleW
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
uxtheme
GetThemeBool
GetThemeTextMetrics
GetThemeSysSize
GetWindowTheme
DrawThemeEdge
CloseThemeData
SetWindowTheme
GetThemeColor
OpenThemeData
GetThemeTextExtent
CloseThemeData
IsThemeActive
DrawThemeBackground
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ