Static task
static1
Behavioral task
behavioral1
Sample
2bc3d04dc5869d66f16cb5686b01ab3bd6feef588b5e819aa7265eceb7131b7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2bc3d04dc5869d66f16cb5686b01ab3bd6feef588b5e819aa7265eceb7131b7b.exe
Resource
win10v2004-20220901-en
General
-
Target
2bc3d04dc5869d66f16cb5686b01ab3bd6feef588b5e819aa7265eceb7131b7b
-
Size
65KB
-
MD5
8196808b287cb70daedad0b02839b284
-
SHA1
c44ecb1e160d85ad4fe7f6253a679fea7d83af13
-
SHA256
2bc3d04dc5869d66f16cb5686b01ab3bd6feef588b5e819aa7265eceb7131b7b
-
SHA512
802d14c747b80b602612a1cd566d28523b8dc78917f42384de7dca466c642936c76cf8e7d9035db994607d63ad1831d94c56c9160ab832bd25534e1129f566b4
-
SSDEEP
1536:lv1sKIOhba5MOXoIiZxGL7+hSoklnf5RkhFkS:p1suaGx1hSFdXc
Malware Config
Signatures
Files
-
2bc3d04dc5869d66f16cb5686b01ab3bd6feef588b5e819aa7265eceb7131b7b.exe windows x86
862de5d27ab4164a7270d9b95b8c514b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetModuleHandleA
CopyFileA
GetFileAttributesA
GetCommandLineA
Sleep
WriteConsoleW
SetEvent
AddAtomW
VirtualProtect
CancelIo
VirtualQuery
GetStartupInfoA
GetProcessHeap
WriteConsoleW
GetPrivateProfileSectionW
HeapDestroy
GetDriveTypeW
lstrlenW
WriteConsoleW
lstrcpyA
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
uxtheme
GetThemeTextExtent
GetThemeTextMetrics
IsThemeActive
GetThemeColor
DrawThemeEdge
GetThemeBool
CloseThemeData
OpenThemeData
SetWindowTheme
GetThemeSysSize
DrawThemeBackground
GetWindowTheme
CloseThemeData
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE