Static task
static1
Behavioral task
behavioral1
Sample
52463ed79cf0d973fd50a426f4ee579b3346a34ecc4d93adbddc6a88c38804be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
52463ed79cf0d973fd50a426f4ee579b3346a34ecc4d93adbddc6a88c38804be.exe
Resource
win10v2004-20220812-en
General
-
Target
52463ed79cf0d973fd50a426f4ee579b3346a34ecc4d93adbddc6a88c38804be
-
Size
775KB
-
MD5
935533c9b16456dedc00d654e138a12c
-
SHA1
42115dfffefe7376406fe36392b9752edae5256e
-
SHA256
52463ed79cf0d973fd50a426f4ee579b3346a34ecc4d93adbddc6a88c38804be
-
SHA512
e62a9b10fb9201111a1cf89accfc30b0ce6d9ff857303386daaf23f5325b94561d84a5d0a37c9f7ec873e99519f9b1c085e89ed906faf958d8b5f02f39642262
-
SSDEEP
12288:31qJVfgNIwCLmkcqzKuOl0W/YD2+kB8X1TYXjQ72jTw0NtvUgSBAqm:3q5ucmDUKrl0+7+dXUQ7chGBAqm
Malware Config
Signatures
Files
-
52463ed79cf0d973fd50a426f4ee579b3346a34ecc4d93adbddc6a88c38804be.exe windows x86
043681148386e87ffe5defbaa51363b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
ExitThread
FindVolumeClose
CancelIo
GetDriveTypeA
FindVolumeClose
GetModuleHandleA
WriteFile
GetCurrentDirectoryW
GetCommandLineW
SetFileAttributesW
MapViewOfFile
CloseHandle
LocalSize
EnterCriticalSection
IsBadReadPtr
GetModuleFileNameA
FindClose
WaitForMultipleObjects
HeapCreate
GetFileTime
GetFileType
GetFileAttributesA
HeapFree
GetCommandLineA
uxtheme
GetThemeBool
GetThemeTextExtent
CloseThemeData
GetThemeTextMetrics
DrawThemeBackground
DrawThemeEdge
IsThemeActive
GetThemeEnumValue
SetWindowTheme
CloseThemeData
OpenThemeData
GetWindowTheme
GetThemeColor
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 767KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE