Static task
static1
Behavioral task
behavioral1
Sample
47e1b6ca490a055cea93047f11dec36b4c622209eaac2040c40ef2e78f672f43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47e1b6ca490a055cea93047f11dec36b4c622209eaac2040c40ef2e78f672f43.exe
Resource
win10v2004-20220812-en
General
-
Target
47e1b6ca490a055cea93047f11dec36b4c622209eaac2040c40ef2e78f672f43
-
Size
299KB
-
MD5
a301e99bbd7e8278bc33790efbad3fe0
-
SHA1
fe6fdc6573caef7a1f318753c09c0ee745fe2971
-
SHA256
47e1b6ca490a055cea93047f11dec36b4c622209eaac2040c40ef2e78f672f43
-
SHA512
437b4d46744a123097f9665e336e790c9bf8164ef6194e537b62ff0625ba5fa11a742f5b450a50f236165bc8220245c3e35cb5ff4a2e8c5cef106a2dfff750f3
-
SSDEEP
6144:vIfqAhgttQzTYdNrZ3aztxVOfIj39LVk4qBfK:QzhgttCCZ3I1Ou39LVk4qBi
Malware Config
Signatures
Files
-
47e1b6ca490a055cea93047f11dec36b4c622209eaac2040c40ef2e78f672f43.exe windows x86
7259cc8ee1a8830a78c26f13f2328b67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
PulseEvent
TlsGetValue
GetStartupInfoA
VirtualProtectEx
FindAtomW
SearchPathA
Sleep
GetDriveTypeA
LoadLibraryW
DeleteFileW
HeapSize
ReleaseMutex
GetLastError
GetLogicalDrives
ReadConsoleA
ReadConsoleA
GetPrivateProfileSectionA
GetStringTypeW
ReadConsoleA
lstrlenA
CloseHandle
uxtheme
GetThemeTextExtent
SetWindowTheme
OpenThemeData
DrawThemeBackground
IsThemeActive
DrawThemeEdge
GetThemeTextMetrics
GetWindowTheme
GetThemeSysSize
GetThemeColor
CloseThemeData
GetThemeBool
CloseThemeData
gpedit
DllGetClassObject
ExportRSoPData
DllCanUnloadNow
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE