Static task
static1
Behavioral task
behavioral1
Sample
d430e0c8e24355cb7fba7fe2ab50c4495f9bd04aa4d5e77a89c4be99748d5057.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d430e0c8e24355cb7fba7fe2ab50c4495f9bd04aa4d5e77a89c4be99748d5057.exe
Resource
win10v2004-20220812-en
General
-
Target
d430e0c8e24355cb7fba7fe2ab50c4495f9bd04aa4d5e77a89c4be99748d5057
-
Size
767KB
-
MD5
04ed6695781496e11b5d4064d69f02fb
-
SHA1
0ff1e944e6587217d46aebdf7a3d52db5d8171a8
-
SHA256
d430e0c8e24355cb7fba7fe2ab50c4495f9bd04aa4d5e77a89c4be99748d5057
-
SHA512
fd2ca9c0d49c0ae2d708ebdd8a59c5882d53af569a490e141750e8b857a7b448363cbb10ac9b64ed68955bdf6fcc35e7a7930285415c54d1495f4f5d2620de4a
-
SSDEEP
12288:cNRMI4BGpUaQ4JiNgtbJQCT5JXDHI32xnGG5O6hlF/WqFEcDOnG+8RW3Y:cI/BopNig12QGQF/N3DgGhRMY
Malware Config
Signatures
Files
-
d430e0c8e24355cb7fba7fe2ab50c4495f9bd04aa4d5e77a89c4be99748d5057.exe windows x86
f986aba06094a0f4c8a41356669cea05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CreatePipe
DeleteFileA
OpenEventW
RemoveDirectoryW
LoadLibraryA
lstrlenA
VirtualProtectEx
GetVersion
CreateFileMappingW
GetStartupInfoA
HeapSize
GetFileSize
GetStdHandle
GetCommandLineW
ReleaseSemaphore
HeapDestroy
RemoveDirectoryW
MapViewOfFile
ReleaseMutex
CreateDirectoryW
SetLastError
SetLastError
CreateMutexA
ExitProcess
uxtheme
GetThemeBool
GetThemeTextMetrics
CloseThemeData
GetWindowTheme
GetThemeTextExtent
DrawThemeEdge
DrawThemeBackground
OpenThemeData
GetThemeColor
SetWindowTheme
CloseThemeData
GetThemeSysSize
IsThemeActive
hhsetup
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE