Static task
static1
Behavioral task
behavioral1
Sample
f5d128a2809e678cf7f9209a3db625656e20c53150fc16310cbc7a96846a9166.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5d128a2809e678cf7f9209a3db625656e20c53150fc16310cbc7a96846a9166.exe
Resource
win10v2004-20220812-en
General
-
Target
f5d128a2809e678cf7f9209a3db625656e20c53150fc16310cbc7a96846a9166
-
Size
749KB
-
MD5
0de20b19c8b23241c96f058553dc2331
-
SHA1
4508d3ba1b0501e14e86e80b1ce6ea8cd35e60bd
-
SHA256
f5d128a2809e678cf7f9209a3db625656e20c53150fc16310cbc7a96846a9166
-
SHA512
de7e17794e92fc68c629d2a39963c9e1d07e3e7c06c64cbd59d821c7121faee3e5bfc4f82b78299186d5e4e1d8699dcaf6cbddde7d11be01062b8d39834b9dd7
-
SSDEEP
12288:8u2AALs/HVklYReRNapJlzTfWfi4GxnZEELbvHDa2Gbcky8QtWoOtM7u31jp+Ia:8i/1UYYRNaDlzTfWfXGxn/+jbv/3oOu5
Malware Config
Signatures
Files
-
f5d128a2809e678cf7f9209a3db625656e20c53150fc16310cbc7a96846a9166.exe windows x86
9e59b9e175018bbcd2e4a8909274f824
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetDriveTypeA
CreatePipe
HeapCreate
SetVolumeLabelA
RemoveDirectoryA
Beep
RemoveDirectoryA
SetLastError
GetModuleFileNameA
GetVersion
FindAtomA
WaitForMultipleObjects
CloseHandle
ExitThread
AddAtomW
IsBadWritePtr
GetFileType
FindClose
GetTapeStatus
WriteFile
CreateSemaphoreW
GetCommandLineA
HeapFree
CreateDirectoryA
uxtheme
CloseThemeData
DrawThemeBackground
CloseThemeData
GetThemeBool
OpenThemeData
GetThemeColor
IsThemeActive
DrawThemeEdge
GetWindowTheme
GetThemeTextExtent
GetThemeTextMetrics
GetThemeSysSize
SetWindowTheme
olesvr32
OleRevokeServer
OleRevokeServer
OleRevokeServer
OleRevokeServer
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE