Static task
static1
Behavioral task
behavioral1
Sample
86a5e9042293ba400c43dadace136acccd9a23e8d6811ae87799854c3016b409.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86a5e9042293ba400c43dadace136acccd9a23e8d6811ae87799854c3016b409.exe
Resource
win10v2004-20220812-en
General
-
Target
86a5e9042293ba400c43dadace136acccd9a23e8d6811ae87799854c3016b409
-
Size
109KB
-
MD5
913e0accb0a17c7aab0019811226b530
-
SHA1
54e3fe0d589e6311414ed86d58b0e1099b85c360
-
SHA256
86a5e9042293ba400c43dadace136acccd9a23e8d6811ae87799854c3016b409
-
SHA512
4e417e4a102641017a61d49b2153528734eb719b22fcbdbc09fc4ad156d8a8a0dab115dc609c1b0e45f4a9d147fbae1708e0ee3b8c71a044bef270b1254ff4a1
-
SSDEEP
3072:3Rd+8YOIDrkP9Ei+ZXL0yyyiJoR7R+fJgAt0u:Bd+ZO39kL0yyyiJy7RHz
Malware Config
Signatures
Files
-
86a5e9042293ba400c43dadace136acccd9a23e8d6811ae87799854c3016b409.exe windows x86
d8c51bfaad8bda5320402ea4987d7354
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetDriveTypeW
lstrcpyA
DeleteFileA
GetStartupInfoA
CopyFileA
GetFileAttributesA
SetEvent
AddAtomW
VirtualProtect
WriteConsoleW
lstrlenW
VirtualQueryEx
GetPrivateProfileSectionW
GetModuleHandleA
GetCommandLineA
GetProcessHeap
WriteConsoleW
WriteConsoleW
Sleep
CancelIo
mmcndmgr
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
uxtheme
GetThemeBool
GetThemeColor
CloseThemeData
SetWindowTheme
CloseThemeData
DrawThemeEdge
GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
OpenThemeData
GetThemeSysSize
GetWindowTheme
DrawThemeBackground
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ