Static task
static1
Behavioral task
behavioral1
Sample
8d2f2b1d040d2c5f9551b4ef122e6a537764cfcd78a2cba69133b5c177b16c7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d2f2b1d040d2c5f9551b4ef122e6a537764cfcd78a2cba69133b5c177b16c7d.exe
Resource
win10v2004-20220812-en
General
-
Target
8d2f2b1d040d2c5f9551b4ef122e6a537764cfcd78a2cba69133b5c177b16c7d
-
Size
162KB
-
MD5
6bd4ad5774e91103a82655b1ee58979f
-
SHA1
0d787099a33da5cf8a165b73b49316531dc76458
-
SHA256
8d2f2b1d040d2c5f9551b4ef122e6a537764cfcd78a2cba69133b5c177b16c7d
-
SHA512
565154750a16b1f6c39442e115b99421f54cce38d848b99fc8780338732939ca02b57a01502ce268c44edd28a818d8d7d84eea2a8b77819e63e634b6ddfb725f
-
SSDEEP
3072:TMUDbSzO2ZRXZ+6zbGbmNl4uoPCAtf5OMrV8abofuGSwc:TMUp2/ZFzbv2daEJV1guG
Malware Config
Signatures
Files
-
8d2f2b1d040d2c5f9551b4ef122e6a537764cfcd78a2cba69133b5c177b16c7d.exe windows x86
873e41629bfda3db309b5bb8cffcf513
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
GetThemeDocumentationProperty
IsThemeDialogTextureEnabled
GetThemeBool
EnableTheming
GetThemeColor
GetThemeFont
SetWindowTheme
GetThemeAppProperties
IsThemeBackgroundPartiallyTransparent
GetThemeSysBool
DrawThemeText
GetCurrentThemeName
EnableThemeDialogTexture
DrawThemeBackground
GetThemeRect
GetWindowTheme
GetThemeMetric
HitTestThemeBackground
OpenThemeData
GetThemeSysColorBrush
GetThemeIntList
CloseThemeData
GetThemePropertyOrigin
GetThemeTextMetrics
GetThemeTextExtent
GetThemeSysString
GetThemeBackgroundContentRect
GetThemeBackgroundExtent
DrawThemeParentBackground
GetThemeInt
GetThemePosition
netapi32
RxNetAccessSetInfo
NetLogonGetTimeServiceParentDomain
NetUserGetLocalGroups
NetGroupSetInfo
NetWkstaGetInfo
NetServerGetInfo
NetScheduleJobDel
I_NetServerGetTrustInfo
NetRemoteComputerSupports
NetpwNameCompare
DsGetForestTrustInformationW
NetLocalGroupAddMember
NetShareEnum
NetpAllocFtinfoEntry
DsDeregisterDnsHostRecordsA
NetMessageNameAdd
NetpHexDump
I_NetServerSetServiceBits
NetReplImportDirEnum
I_NetlogonComputeClientDigest
I_BrowserQueryOtherDomains
I_NetGetDCList
NetGroupAddUser
NetShareDelSticky
I_NetLogonControl
I_NetServerPasswordGet
kernel32
TlsGetValue
RaiseException
FillConsoleOutputAttribute
HeapCreate
VerifyConsoleIoHandle
ExitProcess
FatalExit
lstrcatW
SetLocalPrimaryComputerNameW
FindCloseChangeNotification
WritePrivateProfileSectionA
lstrcpynW
GetNamedPipeHandleStateW
SetCalendarInfoA
InterlockedExchangeAdd
ExpungeConsoleCommandHistoryW
EnumDateFormatsW
GetConsoleAliasW
GetConsoleAliasesLengthA
SetCommTimeouts
lstrcmpW
CreateJobObjectA
GetProfileSectionA
LoadLibraryA
VirtualAlloc
GetFullPathNameW
CreateActCtxA
SetMessageWaitingIndicator
GetSystemTimeAsFileTime
GetFirmwareEnvironmentVariableA
LZOpenFileA
GetVersionExW
FindFirstFileExA
SetConsoleWindowInfo
GlobalAddAtomA
HeapAlloc
GetModuleHandleW
IsWow64Process
GetNumaNodeProcessorMask
ssdpapi
RegisterNotification
GetNextService
RegisterService
FindServicesClose
FindServicesCancel
DHSetICSOff
GetFirstService
DeregisterNotification
DeregisterService
CleanupCache
SsdpCleanup
FreeSsdpMessage
FindServices
SsdpStartup
FindServicesCallback
DHSetICSInterfaces
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ