Static task
static1
Behavioral task
behavioral1
Sample
927269a66707768451f0468e0af0b8cf565ab87461f2e4dce3405db1b86f2833.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
927269a66707768451f0468e0af0b8cf565ab87461f2e4dce3405db1b86f2833.exe
Resource
win10v2004-20220812-en
General
-
Target
927269a66707768451f0468e0af0b8cf565ab87461f2e4dce3405db1b86f2833
-
Size
297KB
-
MD5
a25c7c778c25a90f02249a7cc354cfc0
-
SHA1
73250cfd3f72cdf4dc1eea306ec02818626af312
-
SHA256
927269a66707768451f0468e0af0b8cf565ab87461f2e4dce3405db1b86f2833
-
SHA512
e4d408d2efd0e120c00bfbf4ee32a255d6c9a820e5e0cb37f3fbaa3135f8dc42f64d24e53ea2c1121a2baeadb1105c475ede5f0c0e6ffb4cfb758b021c17e93f
-
SSDEEP
6144:miNUc4P6cmgX2RVXLPhTdYdQrFeGJO0uXDMaS+/E/AG/JRSmvnrZ:xUcUwgYVbhiGc0QXP/6dKmjZ
Malware Config
Signatures
Files
-
927269a66707768451f0468e0af0b8cf565ab87461f2e4dce3405db1b86f2833.exe windows x86
272879c183e509bd6c9b9a35da03459c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryW
ReadConsoleA
CloseHandle
HeapSize
SearchPathA
ReadConsoleA
GetStringTypeW
GetStartupInfoA
Sleep
ReadConsoleA
GetLogicalDrives
VirtualProtectEx
GetDriveTypeA
FindAtomW
GetPrivateProfileSectionA
GetLastError
DeleteFileW
ReleaseMutex
lstrlenA
TlsGetValue
PulseEvent
uxtheme
CloseThemeData
GetThemeColor
OpenThemeData
DrawThemeBackground
IsThemeActive
GetThemeBool
GetThemeTextMetrics
DrawThemeEdge
SetWindowTheme
GetThemeSysSize
GetThemeTextExtent
CloseThemeData
GetWindowTheme
gpedit
BrowseForGPO
DllCanUnloadNow
ExportRSoPData
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 288B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE