Static task
static1
Behavioral task
behavioral1
Sample
be4a509f4bdd5153c147657dbf43627efeea8b62999d4743bda9d28ada256fae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be4a509f4bdd5153c147657dbf43627efeea8b62999d4743bda9d28ada256fae.exe
Resource
win10v2004-20220812-en
General
-
Target
be4a509f4bdd5153c147657dbf43627efeea8b62999d4743bda9d28ada256fae
-
Size
807KB
-
MD5
71ee7150137c054c0228fb0dabb6a440
-
SHA1
c122f0efef4bb63bb4b7221a43e2932c2066e52b
-
SHA256
be4a509f4bdd5153c147657dbf43627efeea8b62999d4743bda9d28ada256fae
-
SHA512
6114623fb951da5ac9852a13be62d8816049f3dbf20c097fea38e31ae1de0b4ee088ffaaa1a89ec2fc036dde8b2c47e72f500cd10ce982a62fa435ebd0a566ee
-
SSDEEP
24576:xD1Sd7Lzhmx9etaMN4xufUR4yQscNW2fa:h8xLz0vetrNICDm
Malware Config
Signatures
Files
-
be4a509f4bdd5153c147657dbf43627efeea8b62999d4743bda9d28ada256fae.exe windows x86
8eecdded07cba6350c72891212e063b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomW
CopyFileA
HeapSize
lstrcpyA
SetEvent
WriteConsoleW
LoadLibraryW
CancelIo
Sleep
GetStartupInfoA
GetCommandLineA
GetProcessHeap
HeapDestroy
VirtualProtect
lstrlenW
GetDriveTypeW
DeleteFileA
GetFileAttributesA
GetPrivateProfileSectionW
WriteConsoleW
WriteConsoleW
mmcndmgr
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
uxtheme
IsThemeActive
GetThemeSysSize
SetWindowTheme
CloseThemeData
GetThemeTextMetrics
GetThemeBool
DrawThemeBackground
GetThemeColor
CloseThemeData
DrawThemeEdge
GetThemeTextExtent
OpenThemeData
GetWindowTheme
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE