Static task
static1
Behavioral task
behavioral1
Sample
f13482c45ac698f5ea79d0f8173e651eba25926a01bc410b4f10b26d5cdedc3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f13482c45ac698f5ea79d0f8173e651eba25926a01bc410b4f10b26d5cdedc3d.exe
Resource
win10v2004-20220812-en
General
-
Target
f13482c45ac698f5ea79d0f8173e651eba25926a01bc410b4f10b26d5cdedc3d
-
Size
767KB
-
MD5
107edc233078c006ec9108cbf185fd69
-
SHA1
22ed07bfdb5668d7d031d33067075ed1cfb04cfc
-
SHA256
f13482c45ac698f5ea79d0f8173e651eba25926a01bc410b4f10b26d5cdedc3d
-
SHA512
af1bb4f85ebe460e733ff9c0ae394ff1f32e2f0e6cb9823f8d405c37176f51304319979747da7382182b6bee77ee9f229e8d32cb74f36d3c4d7eaf0e3a193d57
-
SSDEEP
12288:H0JYcGWlpooX+Pijvkzmgsk4zrCYcZkkI50lJGQNBHzPAjxgADSmBiyHhY27:UJYh2pooOPij8zmgh4/CxVviQfexgcgy
Malware Config
Signatures
Files
-
f13482c45ac698f5ea79d0f8173e651eba25926a01bc410b4f10b26d5cdedc3d.exe windows x86
01df765145b18f8e69cec51b312cf186
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
RemoveDirectoryW
CreateFileA
OpenEventW
CreateMutexA
CreatePipe
MapViewOfFile
RemoveDirectoryW
HeapDestroy
GetStdHandle
ReleaseSemaphore
CreateFileMappingW
SetLastError
ReleaseMutex
HeapSize
CreateDirectoryW
lstrlenA
ExitProcess
SetLastError
DeleteFileA
GetFileSize
VirtualProtectEx
LoadLibraryA
GetVersion
GetStartupInfoA
uxtheme
CloseThemeData
CloseThemeData
GetThemeBool
DrawThemeEdge
GetThemeSysSize
GetWindowTheme
GetThemeTextMetrics
GetThemeTextExtent
DrawThemeBackground
GetThemeColor
IsThemeActive
SetWindowTheme
OpenThemeData
hhsetup
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE