Static task
static1
Behavioral task
behavioral1
Sample
09078cf4086c6a3507dd39da4f00d1e830f7361042b2b5825b81b1bca7c3c966.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
09078cf4086c6a3507dd39da4f00d1e830f7361042b2b5825b81b1bca7c3c966.exe
Resource
win10v2004-20220901-en
General
-
Target
09078cf4086c6a3507dd39da4f00d1e830f7361042b2b5825b81b1bca7c3c966
-
Size
807KB
-
MD5
11f13342893ec349c515be750edbda07
-
SHA1
00a821e6de74e665ab438be2c163a08b14e2f9f3
-
SHA256
09078cf4086c6a3507dd39da4f00d1e830f7361042b2b5825b81b1bca7c3c966
-
SHA512
15a4f320aadc226298f4052afb31ef08a698cff942c63921a7fe40f79eac73b0a8b29473886a1de290f5528437c7588c922eed43b71afe94b2dcaf479bf60a34
-
SSDEEP
24576:VvRIR4KnoHJBIpN5oW5l2hN6MVklODoJjGq7RC:VE4LHY5toH6rllnY
Malware Config
Signatures
Files
-
09078cf4086c6a3507dd39da4f00d1e830f7361042b2b5825b81b1bca7c3c966.exe windows x86
0e04e98ecab85cdc8e924b7c34399ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
HeapDestroy
GetProcessHeap
GetFileAttributesA
Sleep
WriteConsoleW
CancelIo
lstrlenW
WriteConsoleW
HeapSize
CopyFileA
VirtualProtect
GetDriveTypeW
SetEvent
LoadLibraryW
GetStartupInfoA
WriteConsoleW
AddAtomW
DeleteFileA
GetPrivateProfileSectionW
GetCommandLineA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
uxtheme
GetThemeTextMetrics
IsThemeActive
GetThemeSysSize
GetWindowTheme
GetThemeTextExtent
GetThemeBool
CloseThemeData
CloseThemeData
SetWindowTheme
DrawThemeEdge
DrawThemeBackground
GetThemeColor
OpenThemeData
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE