Static task
static1
Behavioral task
behavioral1
Sample
2bbacd0c221c5727e8d19ef12c26952a5e4e948ac6bb1e47b922cf815bd13dfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2bbacd0c221c5727e8d19ef12c26952a5e4e948ac6bb1e47b922cf815bd13dfb.exe
Resource
win10v2004-20220812-en
General
-
Target
2bbacd0c221c5727e8d19ef12c26952a5e4e948ac6bb1e47b922cf815bd13dfb
-
Size
767KB
-
MD5
002cda8dba61093507b33ba89676fc0c
-
SHA1
76e79fb5c365329743112ef4c044ffb0bc2e3d49
-
SHA256
2bbacd0c221c5727e8d19ef12c26952a5e4e948ac6bb1e47b922cf815bd13dfb
-
SHA512
298be681bcb31fba17326415a1c71da6d41b4e1842353a2db0edc1183ef21de1593820df8823bc107072b36649f325d9c4a17d66ff5ddc2ef1ed11416f86cd70
-
SSDEEP
12288:3Uds9v7uC/R35+DrGuUiCsVKjG9OvsbjpoB/ijwuH4YygdCEzXDSC5hYMqOpiCB/:3Udat/R3wvCsIj+as3RhH4+CEjNDOOEr
Malware Config
Signatures
Files
-
2bbacd0c221c5727e8d19ef12c26952a5e4e948ac6bb1e47b922cf815bd13dfb.exe windows x86
19716e8d1a4a9caa50950340d1b62f08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
RemoveDirectoryW
CreateDirectoryW
HeapSize
GetStdHandle
OpenEventW
ExitProcess
ReleaseSemaphore
SetLastError
CreatePipe
VirtualProtectEx
GetFileSize
MapViewOfFile
HeapDestroy
RemoveDirectoryW
SetLastError
GetVersion
DeleteFileA
lstrlenA
GetStartupInfoA
CreateMutexA
GetCommandLineW
LoadLibraryA
CreateFileMappingW
ReleaseMutex
uxtheme
GetThemeTextExtent
IsThemeActive
GetThemeTextMetrics
CloseThemeData
SetWindowTheme
GetThemeSysSize
OpenThemeData
DrawThemeEdge
GetWindowTheme
GetThemeBool
DrawThemeBackground
GetThemeColor
CloseThemeData
hhsetup
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE