Static task
static1
Behavioral task
behavioral1
Sample
d2bdce88226ffdc49095c219374e8456c5a037cffeeb07b2c64ced18019399db.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d2bdce88226ffdc49095c219374e8456c5a037cffeeb07b2c64ced18019399db.exe
Resource
win10v2004-20220812-en
General
-
Target
d2bdce88226ffdc49095c219374e8456c5a037cffeeb07b2c64ced18019399db
-
Size
768KB
-
MD5
0bbbf1ff1437ff4742a0ca283102d270
-
SHA1
584c61d62519c40d4da2c5722372b0eed94e54c7
-
SHA256
d2bdce88226ffdc49095c219374e8456c5a037cffeeb07b2c64ced18019399db
-
SHA512
3da295faaff2e97b87ff746a0295545786cf9c8b16c7d0ce6ea942e0d20bb5b11d6a330a84cd8373d202764d1f53a22dd325813f9dcf3d37b70a11da293d71d2
-
SSDEEP
12288:Kx5V8OPaS6eSbzIuGP2bDcQHvuiuZgsd+K/uZndbxlranVlTVNH4IYzSug3l1jTo:KxkOPKHXI7KDccXYvcgi3lanfD4by3l2
Malware Config
Signatures
Files
-
d2bdce88226ffdc49095c219374e8456c5a037cffeeb07b2c64ced18019399db.exe windows x86
77c789b42ac9f9a12b42f78eec378340
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetFileSize
GetStdHandle
OpenEventW
lstrlenA
VirtualProtectEx
GetStartupInfoA
HeapSize
CreatePipe
ReleaseSemaphore
LoadLibraryA
DeleteFileA
RemoveDirectoryW
MapViewOfFile
GetVersion
RemoveDirectoryW
CreateFileA
SetLastError
CreateDirectoryW
ExitProcess
GetCommandLineW
HeapDestroy
CreateFileMappingW
SetLastError
CreateMutexA
uxtheme
CloseThemeData
GetThemeBool
DrawThemeEdge
GetThemeColor
CloseThemeData
GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
GetThemeSysSize
SetWindowTheme
OpenThemeData
DrawThemeBackground
GetWindowTheme
feclient
FeClientInitialize
FeClientInitialize
FeClientInitialize
FeClientInitialize
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE