Static task
static1
Behavioral task
behavioral1
Sample
7c5c374fff9dd0e030572ec24a1eb4787f5c5f4ea5101c88c3f208e7cb3f8ca0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c5c374fff9dd0e030572ec24a1eb4787f5c5f4ea5101c88c3f208e7cb3f8ca0.exe
Resource
win10v2004-20220901-en
General
-
Target
7c5c374fff9dd0e030572ec24a1eb4787f5c5f4ea5101c88c3f208e7cb3f8ca0
-
Size
299KB
-
MD5
7cdfddba8f4c3146ba1b23e007817d90
-
SHA1
3871c87b9ebebc84acac734a05e448995a148fdf
-
SHA256
7c5c374fff9dd0e030572ec24a1eb4787f5c5f4ea5101c88c3f208e7cb3f8ca0
-
SHA512
e1e1b5ba0df52f4726f6cbc7824947811c22493e8f49f1e80b44589879e0c5ccc52596025927213cb34f6b5489dcb1d11700574e2d8f36f95fd5cbf64d9a3c31
-
SSDEEP
6144:UTQigjOeD798+kcwXB5Fa94Be2kbMVgC4NLvBb79savmHXP:UTQJjz98+6fBe2kYVgxFmHXP
Malware Config
Signatures
Files
-
7c5c374fff9dd0e030572ec24a1eb4787f5c5f4ea5101c88c3f208e7cb3f8ca0.exe windows x86
99653f580e6a79a5ce898ee21864d653
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeW
Sleep
CloseHandle
ReadConsoleA
GetStartupInfoA
GetPrivateProfileSectionA
FindAtomW
ReadConsoleA
SearchPathA
LoadLibraryW
DeleteFileW
GetLastError
ReleaseMutex
GetLogicalDrives
PulseEvent
lstrlenA
VirtualProtectEx
GetDriveTypeA
ReadConsoleA
HeapSize
TlsGetValue
uxtheme
SetWindowTheme
GetThemeSysSize
GetThemeTextMetrics
GetThemeTextExtent
GetThemeBool
DrawThemeBackground
CloseThemeData
DrawThemeEdge
OpenThemeData
GetWindowTheme
GetThemeColor
CloseThemeData
IsThemeActive
gpedit
ExportRSoPData
DllGetClassObject
DllCanUnloadNow
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE