Static task
static1
Behavioral task
behavioral1
Sample
af40b24832d4d9e1fd093c3ff42ef582249eeec9edaeb5aff61fbd3f613f0f96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af40b24832d4d9e1fd093c3ff42ef582249eeec9edaeb5aff61fbd3f613f0f96.exe
Resource
win10v2004-20220812-en
General
-
Target
af40b24832d4d9e1fd093c3ff42ef582249eeec9edaeb5aff61fbd3f613f0f96
-
Size
807KB
-
MD5
90bdd00688e84576fbc23c2df2e6fb50
-
SHA1
bc98f448c47fe6acd56c5e781271e1178e30c9f9
-
SHA256
af40b24832d4d9e1fd093c3ff42ef582249eeec9edaeb5aff61fbd3f613f0f96
-
SHA512
f112739f5783eae2c07d0ad105ade6f0b3a4f5dc1ae5076e71af874ee7b453638c345eb9b4cb66fcd52d2dc1f181ab18f14cd62cf6825da0827960dcd2524f00
-
SSDEEP
12288:v6XR3xm0LqtIefJPrAjgzwgs5qztrXCVn/rQ1iO8dOWv1DgRlFbpDSDSQcZawI:C3x1OKCLEg2YSR/rQ1/8D1sNNuGQcC
Malware Config
Signatures
Files
-
af40b24832d4d9e1fd093c3ff42ef582249eeec9edaeb5aff61fbd3f613f0f96.exe windows x86
90399c0e1cf63a6bcf9f3fec8385521b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
lstrlenW
GetCommandLineA
CopyFileA
WriteConsoleW
AddAtomW
GetProcessHeap
Sleep
GetPrivateProfileSectionW
HeapDestroy
WriteConsoleW
VirtualProtect
CancelIo
HeapSize
LoadLibraryW
GetFileAttributesA
GetStartupInfoA
WriteConsoleW
GetDriveTypeW
lstrcpyA
SetEvent
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
uxtheme
DrawThemeBackground
GetThemeTextMetrics
CloseThemeData
OpenThemeData
CloseThemeData
GetWindowTheme
GetThemeSysSize
GetThemeTextExtent
SetWindowTheme
IsThemeActive
GetThemeBool
DrawThemeEdge
GetThemeColor
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE