Static task
static1
Behavioral task
behavioral1
Sample
b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a.exe
Resource
win10v2004-20220812-en
General
-
Target
b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a
-
Size
299KB
-
MD5
7cc6a1e3e7de0d39690fb4db905ec070
-
SHA1
c169e091a7856665c69712c804d939917a90b9aa
-
SHA256
b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a
-
SHA512
67b1d64af29c1d79dfc7c8a661e10377725fbd07739e6ad76f05e837b111555c7c216a60c8cb9b0a55e68fb01980545dbfe60d801dfcb883ec14cc20b6323da4
-
SSDEEP
6144:wRhc2ty5PDJjDDU/5sAwQQL6a2tOSy0JEgtP6s8L+8eMx8jqZp8:2hc2taDJjDKsAw/SE0JEgtP6a+l8
Malware Config
Signatures
Files
-
b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a.exe windows x86
9f39a14dd50479310905d1d440d07bab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
GetLogicalDrives
lstrlenA
GetPrivateProfileSectionA
ReadConsoleA
GetLastError
ReadConsoleA
Sleep
HeapSize
TlsGetValue
CloseHandle
GetDriveTypeA
ReadConsoleA
SearchPathA
LoadLibraryW
GetStartupInfoA
DeleteFileW
FindAtomW
VirtualProtectEx
PulseEvent
GetStringTypeW
uxtheme
GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
GetWindowTheme
CloseThemeData
DrawThemeBackground
SetWindowTheme
GetThemeColor
DrawThemeEdge
GetThemeSysSize
OpenThemeData
CloseThemeData
GetThemeBool
gpedit
DllGetClassObject
ExportRSoPData
BrowseForGPO
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE