Static task
static1
Behavioral task
behavioral1
Sample
2c64a23984c0544f28a2f0c5c4a395e2dbfac2e89479fdc6b03a5eedc19d2cfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c64a23984c0544f28a2f0c5c4a395e2dbfac2e89479fdc6b03a5eedc19d2cfb.exe
Resource
win10v2004-20220812-en
General
-
Target
2c64a23984c0544f28a2f0c5c4a395e2dbfac2e89479fdc6b03a5eedc19d2cfb
-
Size
65KB
-
MD5
2f0538c521aa1aac4a073b106c77b4be
-
SHA1
3580bc95fa748e6f820d36db7d21245f615e521f
-
SHA256
2c64a23984c0544f28a2f0c5c4a395e2dbfac2e89479fdc6b03a5eedc19d2cfb
-
SHA512
4c1f30422790b720e3c1b1668cf6b9624ab2d0ec8fd13dc7962456132ff1fd57e0c6f4431e9aa48139cfe838fb1c5c2d4162698126d4f98ef53e9480b0accbb0
-
SSDEEP
1536:rrVT9rX/QxXWCbSDbO13H+WrH5a9dORUHNBavbm:YVb4Y3+WIdO4AS
Malware Config
Signatures
Files
-
2c64a23984c0544f28a2f0c5c4a395e2dbfac2e89479fdc6b03a5eedc19d2cfb.exe windows x86
a26fee61f92a2215c63909fd61ca5036
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
Sleep
GetPrivateProfileSectionW
AddAtomW
lstrcpyA
lstrlenW
CopyFileA
LoadLibraryW
HeapSize
CancelIo
DeleteFileA
GetFileAttributesA
GetProcessHeap
GetCommandLineA
GetDriveTypeW
WriteConsoleW
WriteConsoleW
WriteConsoleW
GetStartupInfoA
VirtualProtect
SetEvent
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
uxtheme
GetThemeColor
CloseThemeData
GetThemeTextExtent
GetThemeBool
CloseThemeData
DrawThemeEdge
GetThemeSysSize
GetThemeTextMetrics
DrawThemeBackground
IsThemeActive
GetWindowTheme
OpenThemeData
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE