Static task
static1
Behavioral task
behavioral1
Sample
db666d2fd503266ebdd1f33c01785533f5b14b9c3f5b0f254651cf73af63fc42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db666d2fd503266ebdd1f33c01785533f5b14b9c3f5b0f254651cf73af63fc42.exe
Resource
win10v2004-20220812-en
General
-
Target
db666d2fd503266ebdd1f33c01785533f5b14b9c3f5b0f254651cf73af63fc42
-
Size
198KB
-
MD5
085f0bb332467a462ad51a99aba6a424
-
SHA1
6c5190d0676aa1ee61ce82bdaaf5ce890c4f4154
-
SHA256
db666d2fd503266ebdd1f33c01785533f5b14b9c3f5b0f254651cf73af63fc42
-
SHA512
590fe65d78274bd121863c41a6df8f0c505b5bdc40d202f0aa75ee7081fb1dfccfca5daf3cd16cfefeb52bda2597b1fc2de78dc23d54cd32013ff5f77b693cee
-
SSDEEP
6144:NnTrHfU2yqT0nFC7wkZuUm0wgzaqQE0Fzz1k:NnnHszqoFC7whrm+DE0E
Malware Config
Signatures
Files
-
db666d2fd503266ebdd1f33c01785533f5b14b9c3f5b0f254651cf73af63fc42.exe windows x86
4309884887fee7b3c671216daae58d96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetModuleHandleA
GlobalSize
CloseHandle
FindClose
GetDriveTypeA
GetCommandLineA
GetFileAttributesW
GetModuleFileNameA
GetFileType
GetCurrentDirectoryW
HeapCreate
CreatePipe
WaitForMultipleObjects
CreateSemaphoreA
CancelIo
IsBadWritePtr
Beep
ExitThread
HeapFree
GetStdHandle
lstrlenW
GetCurrentThreadId
CreateDirectoryA
WriteFile
uxtheme
DrawThemeBackground
CloseThemeData
IsThemeActive
DrawThemeEdge
GetThemeBool
OpenThemeData
GetThemeTextMetrics
GetWindowTheme
GetThemeColor
CloseThemeData
SetWindowTheme
GetThemeSysSize
GetThemeTextExtent
iaspolcy
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE