Static task
static1
Behavioral task
behavioral1
Sample
9af4ec1d4dd34405e1e98c0ad2d41002858cc86f524808342ba7d3c0b2ade0a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9af4ec1d4dd34405e1e98c0ad2d41002858cc86f524808342ba7d3c0b2ade0a2.exe
Resource
win10v2004-20220812-en
General
-
Target
9af4ec1d4dd34405e1e98c0ad2d41002858cc86f524808342ba7d3c0b2ade0a2
-
Size
62KB
-
MD5
3e6ffa1606421d1a47bf2a9d84c5a831
-
SHA1
b7b779f2d2d838efc807d3bd89ab7285dd7e13a4
-
SHA256
9af4ec1d4dd34405e1e98c0ad2d41002858cc86f524808342ba7d3c0b2ade0a2
-
SHA512
3a7623ef19ec8ace7a729b16c47f82e40ca0c19021899b463e7274b103b51efcd5488aea38b2665158f05e22a9753f1e42fd264983f073ee199af8752c67d89b
-
SSDEEP
1536:6LAoiwKMDFwHmWd/+4vW2/dCKCXc4bkIFu:kMEwHmqW4vW2/oJnFu
Malware Config
Signatures
Files
-
9af4ec1d4dd34405e1e98c0ad2d41002858cc86f524808342ba7d3c0b2ade0a2.exe windows x86
9016b86d924ebf0874ca8cf0eb516583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapFree
CloseHandle
WaitForMultipleObjects
FindVolumeClose
lstrlenA
HeapCreate
SetFileAttributesW
ExitThread
GetFileAttributesA
FindVolumeClose
GetDriveTypeA
GetCommandLineA
ReadFile
FindClose
LocalSize
EnterCriticalSection
GetCommandLineW
GetFileTime
GetCurrentDirectoryW
GetFileType
MapViewOfFile
GlobalLock
GetEnvironmentVariableW
IsBadReadPtr
uxtheme
DrawThemeBackground
CloseThemeData
GetThemeColor
GetThemeEnumValue
GetThemeBool
SetWindowTheme
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
IsThemeActive
OpenThemeData
GetWindowTheme
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dbcrlkl Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE