Static task
static1
Behavioral task
behavioral1
Sample
99e65f1048644e43964526984e25befdf811eabd051e49923f3b3f70ab568347.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99e65f1048644e43964526984e25befdf811eabd051e49923f3b3f70ab568347.exe
Resource
win10v2004-20220812-en
General
-
Target
99e65f1048644e43964526984e25befdf811eabd051e49923f3b3f70ab568347
-
Size
767KB
-
MD5
036d8e5e268a108d8aaf73cbbb0f3dc6
-
SHA1
02a299984bfbb9c4c9a107a9e59e88845f918b05
-
SHA256
99e65f1048644e43964526984e25befdf811eabd051e49923f3b3f70ab568347
-
SHA512
4c244068a6c8706e733ee29c2a846326597b3e551c52b1619942f8a5c32cdbc5615c82dfcac3d3800dabb7af30b81b3b49d2db908bd121ccbd459204e73e9dba
-
SSDEEP
12288:hOjB4lJNDJQTzDfX56WIRBl5fXkcJfFnKVObvImLGiy/cTW55/vrZfF0iBAexwTC:e4lVQTPfX56WIbfkcJfFnKVOLzC4TWnY
Malware Config
Signatures
Files
-
99e65f1048644e43964526984e25befdf811eabd051e49923f3b3f70ab568347.exe windows x86
93901d5c9c32eb32f6302b34b16f8948
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
RemoveDirectoryW
CreateMutexA
RemoveDirectoryW
lstrlenA
MapViewOfFile
GetCommandLineW
OpenEventW
LoadLibraryA
SetLastError
GetFileSize
VirtualProtectEx
DeleteFileA
ReleaseSemaphore
HeapSize
CreateFileA
GetStartupInfoA
HeapDestroy
GetVersion
ReleaseMutex
ExitProcess
CreateDirectoryW
GetStdHandle
CreatePipe
CreateFileMappingW
uxtheme
GetThemeTextMetrics
GetWindowTheme
CloseThemeData
GetThemeTextExtent
DrawThemeBackground
SetWindowTheme
CloseThemeData
GetThemeBool
DrawThemeEdge
OpenThemeData
IsThemeActive
GetThemeSysSize
GetThemeColor
hhsetup
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE