Static task
static1
Behavioral task
behavioral1
Sample
4afd1e408c2d70a1efbc9fcc63ee30efd28b343868c880a91d23c795cab45c66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4afd1e408c2d70a1efbc9fcc63ee30efd28b343868c880a91d23c795cab45c66.exe
Resource
win10v2004-20220812-en
General
-
Target
4afd1e408c2d70a1efbc9fcc63ee30efd28b343868c880a91d23c795cab45c66
-
Size
768KB
-
MD5
166c2799bcb837a03545292ceab770f7
-
SHA1
3d3add74fea22d6254ee69df628b903c6d050809
-
SHA256
4afd1e408c2d70a1efbc9fcc63ee30efd28b343868c880a91d23c795cab45c66
-
SHA512
4398e5816fe90799a67b1c2b0ba28c6caba8a128d9c2864105551f58f8342099d514c257ce23f7f03fb91c5a65372bd62a1abbb06ba10e60fd74179c4f7af2aa
-
SSDEEP
12288:/oUid+1jkZid7cNEtPT0VG1mZ6H+ky7XSFVcZum9sALYXoIDZRHvMyCIAHss3nHt:/oUiU1nltT0VG1mZ6ekySexbLkoIDZRW
Malware Config
Signatures
Files
-
4afd1e408c2d70a1efbc9fcc63ee30efd28b343868c880a91d23c795cab45c66.exe windows x86
38c7af12b2e1ffb154794f3c08b80906
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
CreateDirectoryW
HeapSize
GetVersion
MapViewOfFile
DeleteFileA
lstrlenA
LoadLibraryA
ReleaseMutex
OpenEventW
ReleaseSemaphore
CreateFileA
SetLastError
CreateMutexA
GetStdHandle
SetLastError
RemoveDirectoryW
GetCommandLineW
ExitProcess
GetFileSize
CreatePipe
GetStartupInfoA
VirtualProtectEx
CreateFileMappingW
RemoveDirectoryW
uxtheme
GetThemeColor
GetWindowTheme
CloseThemeData
GetThemeTextExtent
CloseThemeData
DrawThemeEdge
GetThemeSysSize
OpenThemeData
IsThemeActive
GetThemeTextMetrics
SetWindowTheme
DrawThemeBackground
GetThemeBool
feclient
FeClientInitialize
FeClientInitialize
FeClientInitialize
FeClientInitialize
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE