Static task
static1
Behavioral task
behavioral1
Sample
95bce145a034933230bc2303199142602b581133018a590710a0a8117077fb1a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
95bce145a034933230bc2303199142602b581133018a590710a0a8117077fb1a.exe
Resource
win10v2004-20220812-en
General
-
Target
95bce145a034933230bc2303199142602b581133018a590710a0a8117077fb1a
-
Size
767KB
-
MD5
0a81e0cf27877fccee3af5529e2165be
-
SHA1
70b0f7696dd51dfd811662c37b033adb67aba642
-
SHA256
95bce145a034933230bc2303199142602b581133018a590710a0a8117077fb1a
-
SHA512
e5f56e5bcc8f502673dcc543c3f1e6d9649dc25e92c26f7d426dd979452deb8c17a558943bf3e81836daf2cf98993a5bef714c044afd12f3bb8af7a043b7acbd
-
SSDEEP
12288:Bl7sutpAUEhmUmqr7qyF0aPfLp1U9olrFE6CcxDeL9pcYrG9PT/ZZuCYs0o:BlHry5Pzp1iotD1STILB10o
Malware Config
Signatures
Files
-
95bce145a034933230bc2303199142602b581133018a590710a0a8117077fb1a.exe windows x86
e310b1ad5eb2a13721821be7d58138fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetFileSize
CreateDirectoryW
RemoveDirectoryW
FatalExit
GetVersion
CreatePipe
SetLastError
ReleaseSemaphore
GetCommandLineW
CreateFileA
RemoveDirectoryW
VirtualProtect
GetStartupInfoA
lstrlenA
SetLastError
OpenEventW
HeapDestroy
CreateFileMappingW
GetStdHandle
ReleaseMutex
LoadLibraryA
DeleteFileA
MapViewOfFile
HeapSize
uxtheme
CloseThemeData
SetWindowTheme
GetThemeTextExtent
GetThemeSysSize
DrawThemeBackground
GetWindowTheme
IsThemeActive
DrawThemeEdge
CloseThemeData
OpenThemeData
GetThemeTextMetrics
GetThemeBool
GetThemeColor
iernonce
InitCallback
RunOnceExProcess
InitCallback
RunOnceExProcess
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE