Static task
static1
Behavioral task
behavioral1
Sample
4a9edc2111a9a61477391aae60983c47cb093823176c6be821cb3bd4e226466a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a9edc2111a9a61477391aae60983c47cb093823176c6be821cb3bd4e226466a.exe
Resource
win10v2004-20220901-en
General
-
Target
4a9edc2111a9a61477391aae60983c47cb093823176c6be821cb3bd4e226466a
-
Size
767KB
-
MD5
0c0b10fc60a8fd22b74d221f13610cd7
-
SHA1
273cab8784ce8d0f0c18c457d3d72826b238678b
-
SHA256
4a9edc2111a9a61477391aae60983c47cb093823176c6be821cb3bd4e226466a
-
SHA512
0360efe4b0216a6d0076379f04eb766b0ea585b11570c4ef44477571cb685e395cfb1c838c133c315d4d7b222e1dcd09efcadbfcc19470938c905541d594d37e
-
SSDEEP
12288:yo3pDvL6gW1+D1c6G+xzRf2xoesrg9wMfocqb0rsb8AYEVlungIpEOXmMUt:yo5Deg7JcKGs8Do/LuntpY
Malware Config
Signatures
Files
-
4a9edc2111a9a61477391aae60983c47cb093823176c6be821cb3bd4e226466a.exe windows x86
cd672988ea31aeefa71003287bb3d078
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
CreatePipe
VirtualProtect
lstrlenA
ReleaseMutex
SetLastError
ReleaseSemaphore
MapViewOfFile
GetStdHandle
CreateDirectoryW
DeleteFileA
CreateFileMappingW
CreateMutexA
HeapDestroy
GetStartupInfoA
GetVersion
SetLastError
OpenEventW
RemoveDirectoryW
GetCommandLineW
HeapSize
FatalExit
CreateFileA
LoadLibraryA
RemoveDirectoryW
uxtheme
GetThemeTextExtent
DrawThemeEdge
GetThemeTextMetrics
IsThemeActive
GetThemeBool
OpenThemeData
CloseThemeData
DrawThemeBackground
GetWindowTheme
CloseThemeData
GetThemeColor
GetThemeSysSize
SetWindowTheme
iernonce
RunOnceExProcess
RunOnceExProcess
InitCallback
InitCallback
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE