Static task
static1
Behavioral task
behavioral1
Sample
2b592366bba7bef62e7340390dafcf7934d56a70f588608ee1edcd56ea428f2b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2b592366bba7bef62e7340390dafcf7934d56a70f588608ee1edcd56ea428f2b.exe
Resource
win10v2004-20220812-en
General
-
Target
2b592366bba7bef62e7340390dafcf7934d56a70f588608ee1edcd56ea428f2b
-
Size
296KB
-
MD5
7521c9f7f0abc38f4fdf736e0858dd30
-
SHA1
f5901183237d7b7d3670e04a4e46e1d2dc20695c
-
SHA256
2b592366bba7bef62e7340390dafcf7934d56a70f588608ee1edcd56ea428f2b
-
SHA512
daad57224039229e28ef3d7c953bee2171b7bb91d323cf0cc2541cb9a197e28b0381fb65e753464a8827a919644d1da5a41b45b0b74ba4bf7931fdddc08c7dad
-
SSDEEP
6144:NnbOyVhEF9acL1HjLidOjt+HwhSRXSx7a4k8azozea2BfqzpX:N2S4dLr4whSRXSlaD8aa2Bfqzp
Malware Config
Signatures
Files
-
2b592366bba7bef62e7340390dafcf7934d56a70f588608ee1edcd56ea428f2b.exe windows x86
23070ac811484351c8e90a479193dde7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
VirtualProtect
CopyFileA
GetDriveTypeW
LoadLibraryW
HeapDestroy
GetFileAttributesA
CancelIo
GetCommandLineA
DeleteFileA
GetStartupInfoA
HeapSize
SetEvent
Sleep
AddAtomW
GetPrivateProfileSectionW
WriteConsoleW
lstrlenW
lstrcpyA
WriteConsoleW
WriteConsoleW
mmcndmgr
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
uxtheme
GetThemeTextExtent
GetThemeSysSize
CloseThemeData
GetThemeTextMetrics
GetThemeColor
SetWindowTheme
OpenThemeData
DrawThemeEdge
GetThemeBool
CloseThemeData
GetWindowTheme
DrawThemeBackground
IsThemeActive
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE