Static task
static1
Behavioral task
behavioral1
Sample
68c8e6fc5b4e840448f73c2b8fc85f2184060c88c92bcbb3afba88ae55038438.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
68c8e6fc5b4e840448f73c2b8fc85f2184060c88c92bcbb3afba88ae55038438.exe
Resource
win10v2004-20220901-en
General
-
Target
68c8e6fc5b4e840448f73c2b8fc85f2184060c88c92bcbb3afba88ae55038438
-
Size
296KB
-
MD5
965100dcc528cdaa6d84696772181820
-
SHA1
1b75ec8e08c4180aa5df7b876b283ac972e36c69
-
SHA256
68c8e6fc5b4e840448f73c2b8fc85f2184060c88c92bcbb3afba88ae55038438
-
SHA512
f2161b21bcc124be3222eded3d14950c6f9cc38588da0bb13f04b7e7a0aa25cdee379e2d1c32e0001b73a3139a12d3adeff4b31940e8e44eb2be12886cbbdfc5
-
SSDEEP
6144:h7d0bNrpfXquAW0Ltm4+nW4UofT6WhgxHCEmCqk1OdJLd:kZdfOW0LthgJUojEfQvLd
Malware Config
Signatures
Files
-
68c8e6fc5b4e840448f73c2b8fc85f2184060c88c92bcbb3afba88ae55038438.exe windows x86
1b238dcce414f683cb08d813b862b717
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
WriteConsoleW
WriteConsoleW
AddAtomW
CancelIo
GetDriveTypeW
GetStartupInfoA
Sleep
lstrlenW
GetProcessHeap
WriteConsoleW
VirtualProtect
VirtualQuery
GetCommandLineA
GetFileAttributesA
SetEvent
CopyFileA
GetPrivateProfileSectionW
lstrcpyA
HeapDestroy
GetModuleHandleA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
uxtheme
GetThemeTextMetrics
GetThemeBool
DrawThemeEdge
GetThemeColor
CloseThemeData
GetWindowTheme
OpenThemeData
CloseThemeData
IsThemeActive
SetWindowTheme
GetThemeTextExtent
GetThemeSysSize
DrawThemeBackground
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE