Static task
static1
Behavioral task
behavioral1
Sample
949e634ff22a00821548b604438b83e948ef3b2439aa95335f7edb6bba8522cd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
949e634ff22a00821548b604438b83e948ef3b2439aa95335f7edb6bba8522cd.exe
Resource
win10v2004-20220812-en
General
-
Target
949e634ff22a00821548b604438b83e948ef3b2439aa95335f7edb6bba8522cd
-
Size
748KB
-
MD5
09dc538bd3a06e8008e08bc5190a4c87
-
SHA1
6f390dd0bd99aa017900d7c82702fd9a83443d2c
-
SHA256
949e634ff22a00821548b604438b83e948ef3b2439aa95335f7edb6bba8522cd
-
SHA512
7802122df8e4129d1ab899111e2aa3e923b9b3e927125d432115df52c5f3c5da6cfbfdaa2f873ca61741c649f9b88c463b888780082a57c27dca9a8a67cf4ad3
-
SSDEEP
12288:BLaiTet/sz1RjvOodvhH7OjK+axMbtmkA/A0SmpG1edmOJVDpMUh2zAITVd3WE:9agRCoLH7OjK7xMbDlHmc1edBlM3cydd
Malware Config
Signatures
Files
-
949e634ff22a00821548b604438b83e948ef3b2439aa95335f7edb6bba8522cd.exe windows x86
f00c5941c8c00ab72a094027a4909cb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetModuleHandleA
HeapCreate
CreateSemaphoreA
GetFileAttributesA
HeapFree
GetCurrentDirectoryW
CreateDirectoryA
CancelIo
GetDriveTypeA
GetFileType
FindClose
EnterCriticalSection
WaitForMultipleObjects
GetFileTime
ExitThread
GetTickCount
GetCommandLineA
WriteFile
IsBadReadPtr
FindVolumeClose
GetModuleFileNameA
FindVolumeClose
LocalSize
CloseHandle
uxtheme
GetThemeBool
CloseThemeData
GetThemeEnumValue
IsThemeActive
DrawThemeBackground
GetWindowTheme
GetThemeColor
CloseThemeData
OpenThemeData
GetThemeTextExtent
GetThemeTextMetrics
DrawThemeEdge
SetWindowTheme
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE