Static task
static1
Behavioral task
behavioral1
Sample
43bac1b011939c291bcf922cd3fc7b87c448b6910cacd85a3a7b188308baf8b9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
43bac1b011939c291bcf922cd3fc7b87c448b6910cacd85a3a7b188308baf8b9.exe
Resource
win10v2004-20220812-en
General
-
Target
43bac1b011939c291bcf922cd3fc7b87c448b6910cacd85a3a7b188308baf8b9
-
Size
113KB
-
MD5
6599f1afa94a3808fb09b2502e7e3b10
-
SHA1
b035130cf8122325507bc8d8734b8c5055919912
-
SHA256
43bac1b011939c291bcf922cd3fc7b87c448b6910cacd85a3a7b188308baf8b9
-
SHA512
a2b423e2ecae44eb27dcfd7a7c97399951bc3c45dcd28ab6d2e44c43775db1ad222f7a685e3631bec7bb07d7b1d6101b3d19f08f59f65cf755674467c4a1f948
-
SSDEEP
3072:7te2jT4rG9yfLY7aXOBzTjvJz+ixl1O5ohRyPju:7tNTIO4k7aXuJxjyW1
Malware Config
Signatures
Files
-
43bac1b011939c291bcf922cd3fc7b87c448b6910cacd85a3a7b188308baf8b9.exe windows x86
1faf2f071dfd52788c481aadb58c8185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
WriteConsoleW
HeapDestroy
GetProcessHeap
GetStartupInfoA
GetDriveTypeW
CancelIo
Sleep
lstrcpyA
WriteConsoleW
lstrlenW
AddAtomW
HeapSize
DeleteFileA
SetEvent
VirtualProtect
GetPrivateProfileSectionW
CopyFileA
LoadLibraryW
WriteConsoleW
GetCommandLineA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
uxtheme
DrawThemeEdge
GetThemeColor
GetThemeTextExtent
SetWindowTheme
OpenThemeData
GetThemeTextMetrics
GetWindowTheme
GetThemeSysSize
DrawThemeBackground
CloseThemeData
IsThemeActive
GetThemeBool
CloseThemeData
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE