Static task
static1
Behavioral task
behavioral1
Sample
f2df9d2652251c09de5f63863f7182dcad9ef868d037baa386728e95a00ed6dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2df9d2652251c09de5f63863f7182dcad9ef868d037baa386728e95a00ed6dd.exe
Resource
win10v2004-20220812-en
General
-
Target
f2df9d2652251c09de5f63863f7182dcad9ef868d037baa386728e95a00ed6dd
-
Size
278KB
-
MD5
1595f4345108efba73f742a3754fe7c5
-
SHA1
2f9cb61f82de65c49f9c31da0ba5692ebeb142e1
-
SHA256
f2df9d2652251c09de5f63863f7182dcad9ef868d037baa386728e95a00ed6dd
-
SHA512
1ed9e102def2c545bd8dbaef21e5af649c2b00ae49280dd4507cd91493e414d1ef276bf7391e5f359f6675b919ae4a85c15943a5f3fe201e65da379a41cb8044
-
SSDEEP
6144:pLjIq+YfrQE6ORpJrksWFXqkRQuKKuuXhHKYZPbsAFyqGAS4jFTZkY9U9RfArIL:pHIq+kfFf+sWFH3uuxqiPpsd4jFTlU91
Malware Config
Signatures
Files
-
f2df9d2652251c09de5f63863f7182dcad9ef868d037baa386728e95a00ed6dd.exe windows x86
f4b01a39e98b6821e1c5c80d91c76ec4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
ExitProcess
GetTickCount
IsBadReadPtr
GetCurrentDirectoryW
Sleep
ReadFile
GetFileAttributesA
SuspendThread
GetDriveTypeA
HeapCreate
GlobalLock
SetLastError
GetCommandLineW
GetModuleHandleA
EnterCriticalSection
LocalSize
GetEnvironmentVariableW
CloseHandle
GetFileType
WaitForSingleObject
SetFileAttributesW
GetFileTime
MapViewOfFile
SetLastError
uxtheme
CloseThemeData
GetThemeEnumValue
GetThemeTextExtent
OpenThemeData
GetThemeColor
CloseThemeData
DrawThemeBackground
GetThemeBool
GetThemeTextMetrics
IsThemeActive
DrawThemeEdge
GetWindowTheme
SetWindowTheme
credssp
SpVerifySignature
SpVerifySignature
SpVerifySignature
SpVerifySignature
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE