Static task
static1
Behavioral task
behavioral1
Sample
0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9.exe
Resource
win7-20220901-en
General
-
Target
0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9
-
Size
119KB
-
MD5
01bb1ed3dc487fbd3de3587f887cac75
-
SHA1
560d9fa7931356a2ddfc7b226a6d3ebdb842473a
-
SHA256
0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9
-
SHA512
8da4994df14934ea5ec837ff6cf640dee51f5431604648bee5b1297cb7f4a0fd14deaf2350d14d51f15efbafe82301b0fa344d24f9a2f4a2c94acd9fe8539320
-
SSDEEP
3072:3Uzhx2Mnwol3C/6/MKPf75hIGAUmUmU3Y:EDfw83C4NomBB
Malware Config
Signatures
Files
-
0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9.exe windows x86
9b3772cd57b430b21995d1811273bdfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHChangeNotify
ExtractIconA
DragQueryFileW
SHGetMalloc
SHGetDiskFreeSpaceA
ShellMessageBoxA
SHGetNewLinkInfoA
FindExecutableW
ExtractAssociatedIconA
SHGetDataFromIDListA
DragFinish
SHUpdateImageA
SHFileOperationA
DragQueryPoint
SHFree
StrChrW
ShellAboutA
rsaenh
CPCreateHash
CPDeriveKey
CPGenKey
CPDecrypt
CPEncrypt
uxtheme
DrawThemeEdge
GetThemeColor
GetThemeSysSize
CloseThemeData
IsAppThemed
SetWindowTheme
OpenThemeData
GetThemeEnumValue
GetCurrentThemeName
GetWindowTheme
GetThemeBool
kernel32
WaitForSingleObjectEx
CreateDirectoryW
OpenMutexA
lstrcpynA
FindNextFileA
CreateWaitableTimerW
GetLogicalDriveStringsW
GetModuleHandleA
GetFileAttributesA
QueryDosDeviceA
HeapReAlloc
GetDateFormatA
CreateFileA
GetProcAddress
GetWindowsDirectoryA
GetBinaryTypeA
CreateHardLinkA
InterlockedIncrement
GetTickCount
GetStringTypeA
lstrcatW
GetOEMCP
GetDiskFreeSpaceA
MoveFileExW
GetProcessHeap
RemoveDirectoryA
CompareStringW
GetNumberFormatA
WriteConsoleW
CreateMutexW
GetStartupInfoA
GetSystemDirectoryA
DeleteFileW
ReadFile
WriteFile
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ