Static task
static1
Behavioral task
behavioral1
Sample
fb74d9b945c38ee175572e11e75cbb9fc988d121ab350ad58071ec588e4b1d4f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fb74d9b945c38ee175572e11e75cbb9fc988d121ab350ad58071ec588e4b1d4f.exe
Resource
win10v2004-20220812-en
General
-
Target
fb74d9b945c38ee175572e11e75cbb9fc988d121ab350ad58071ec588e4b1d4f
-
Size
296KB
-
MD5
59ea40585d28ba5d80f7abca43b91a90
-
SHA1
8741d606639900304cc34dec19644540928fcd29
-
SHA256
fb74d9b945c38ee175572e11e75cbb9fc988d121ab350ad58071ec588e4b1d4f
-
SHA512
2adf91dce5167664be9910be38c0336b076d78cb9874fbf1add57d1dc75bd3ece93155adafb159b039fcd48b2604b7b0d5231de83d230616b06daa67c3c84a76
-
SSDEEP
6144:i5rrPyV3b6m/0sed6+Adl0tmXc/hHhJkuotbvT/UBOIkpP0NtGZ2OYDYTNz2:i5Pkblssh+0lQmseuotbL/aVkJ0yZkDP
Malware Config
Signatures
Files
-
fb74d9b945c38ee175572e11e75cbb9fc988d121ab350ad58071ec588e4b1d4f.exe windows x86
d5bf5bb7dd25a36bee970c0092b2faf6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomW
LoadLibraryW
WriteConsoleW
CopyFileA
GetFileAttributesA
GetProcessHeap
CancelIo
WriteConsoleW
GetStartupInfoA
HeapDestroy
VirtualProtect
GetPrivateProfileSectionW
HeapSize
WriteConsoleW
GetDriveTypeW
Sleep
DeleteFileA
lstrlenW
GetCommandLineA
SetEvent
lstrcpyA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
uxtheme
GetThemeTextExtent
GetThemeTextMetrics
GetThemeColor
DrawThemeBackground
GetThemeBool
OpenThemeData
CloseThemeData
IsThemeActive
DrawThemeEdge
CloseThemeData
GetThemeSysSize
GetWindowTheme
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE