Static task
static1
Behavioral task
behavioral1
Sample
d1526820382dd2779f2586a79c3e0617d10c9a9caa3bc6be0341103e762086e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1526820382dd2779f2586a79c3e0617d10c9a9caa3bc6be0341103e762086e5.exe
Resource
win10v2004-20220812-en
General
-
Target
d1526820382dd2779f2586a79c3e0617d10c9a9caa3bc6be0341103e762086e5
-
Size
65KB
-
MD5
84f252418fe139f8ed4e2ea96fef1470
-
SHA1
4bc3a88bee889349c1fa9a35691ee1853050862b
-
SHA256
d1526820382dd2779f2586a79c3e0617d10c9a9caa3bc6be0341103e762086e5
-
SHA512
8acd4d98a621682e4bf4a6fd406ec9d73d5ffc76f93f6335ec4b37c1014b2f9a3139f8befe4eec28abbfd9ab0c316d7363522eb097fb4671c097e6aaeade3985
-
SSDEEP
1536:w1TKGqWtGXCtMbJJ8u8U6j059VcgOLy7BRRHb:wRXG5dJ8fU6w5cgiydRV
Malware Config
Signatures
Files
-
d1526820382dd2779f2586a79c3e0617d10c9a9caa3bc6be0341103e762086e5.exe windows x86
54c257f75a28a687af15c051c7547f4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
WriteConsoleW
WriteConsoleW
GetPrivateProfileSectionW
GetStartupInfoA
GetDriveTypeW
LoadLibraryW
CancelIo
HeapSize
lstrlenW
CopyFileA
DeleteFileA
Sleep
GetFileAttributesA
WriteConsoleW
GetCommandLineA
AddAtomW
VirtualProtect
GetProcessHeap
SetEvent
lstrcpyA
mmcndmgr
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
uxtheme
OpenThemeData
DrawThemeEdge
CloseThemeData
GetWindowTheme
GetThemeColor
CloseThemeData
GetThemeTextExtent
GetThemeSysSize
IsThemeActive
DrawThemeBackground
SetWindowTheme
GetThemeTextMetrics
GetThemeBool
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE