Static task
static1
Behavioral task
behavioral1
Sample
a35e5d3f05b173d9531418e5b6b3f7450c299826d728cfecf8a05d7d775f13f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a35e5d3f05b173d9531418e5b6b3f7450c299826d728cfecf8a05d7d775f13f9.exe
Resource
win10v2004-20220901-en
General
-
Target
a35e5d3f05b173d9531418e5b6b3f7450c299826d728cfecf8a05d7d775f13f9
-
Size
61KB
-
MD5
05b2c90477ffb94b32d130bcd3954ded
-
SHA1
6ac91a98be9bcf5bdb5d8b0e89206e09280f8aa8
-
SHA256
a35e5d3f05b173d9531418e5b6b3f7450c299826d728cfecf8a05d7d775f13f9
-
SHA512
90267b3b208db2f8157c32cd9773e203884e670d29c3abdf2e1d5b40ee9fdb0054aa95a94f7af66f59f598e8b063ec729e4aa31c46694437962a953685049178
-
SSDEEP
1536:+gAoiwKMDFwHmWd/+4vW2/dCKCXc4bkI:TMEwHmqW4vW2/oJn
Malware Config
Signatures
Files
-
a35e5d3f05b173d9531418e5b6b3f7450c299826d728cfecf8a05d7d775f13f9.exe windows x86
9016b86d924ebf0874ca8cf0eb516583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapFree
CloseHandle
WaitForMultipleObjects
FindVolumeClose
lstrlenA
HeapCreate
SetFileAttributesW
ExitThread
GetFileAttributesA
FindVolumeClose
GetDriveTypeA
GetCommandLineA
ReadFile
FindClose
LocalSize
EnterCriticalSection
GetCommandLineW
GetFileTime
GetCurrentDirectoryW
GetFileType
MapViewOfFile
GlobalLock
GetEnvironmentVariableW
IsBadReadPtr
uxtheme
DrawThemeBackground
CloseThemeData
GetThemeColor
GetThemeEnumValue
GetThemeBool
SetWindowTheme
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
IsThemeActive
OpenThemeData
GetWindowTheme
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
etcqzvs Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE