Static task
static1
Behavioral task
behavioral1
Sample
0ff59a355eba30680ac7c1af066246eb6d00e1c1d8f0515cf78911447548945d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ff59a355eba30680ac7c1af066246eb6d00e1c1d8f0515cf78911447548945d.exe
Resource
win10v2004-20220901-en
General
-
Target
0ff59a355eba30680ac7c1af066246eb6d00e1c1d8f0515cf78911447548945d
-
Size
296KB
-
MD5
629dcbdc03cba00a2655f48a6fbe03c1
-
SHA1
3d1cdf741ba50e1608aebecb4d61d54f454f9a56
-
SHA256
0ff59a355eba30680ac7c1af066246eb6d00e1c1d8f0515cf78911447548945d
-
SHA512
2c7215b5b5ca8525c2639ae22af21e61056f4acb7d70d0a18841dfed632bd6e36d9adc959d2ecd770b9c042131f29c9a30488eef7f2f963faac53bb1750d8a00
-
SSDEEP
6144:lB4SdqBA7WQIEfP7lUEcBV7cIV0hJ4bHgnSYD4KestRZ3Z0ft/:rgA7WHu7lNcBVYIGhJ4bASYD4KrRZst
Malware Config
Signatures
Files
-
0ff59a355eba30680ac7c1af066246eb6d00e1c1d8f0515cf78911447548945d.exe windows x86
ca8a223494471959f9dcb628076b96bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
CancelIo
GetStartupInfoA
GetFileAttributesA
HeapDestroy
LoadLibraryW
WriteConsoleW
lstrcpyA
AddAtomW
VirtualProtect
GetPrivateProfileSectionW
GetProcessHeap
CopyFileA
HeapSize
lstrlenW
WriteConsoleW
GetDriveTypeW
DeleteFileA
WriteConsoleW
SetEvent
Sleep
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
uxtheme
GetThemeBool
GetThemeSysSize
DrawThemeBackground
GetThemeColor
CloseThemeData
GetThemeTextExtent
OpenThemeData
DrawThemeEdge
GetThemeTextMetrics
GetWindowTheme
IsThemeActive
CloseThemeData
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE