Static task
static1
Behavioral task
behavioral1
Sample
873bcf864624db9f597ceef76772a3b1b78b30c6eb984415f5d33081d26cb39f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
873bcf864624db9f597ceef76772a3b1b78b30c6eb984415f5d33081d26cb39f.exe
Resource
win10v2004-20220812-en
General
-
Target
873bcf864624db9f597ceef76772a3b1b78b30c6eb984415f5d33081d26cb39f
-
Size
749KB
-
MD5
bafe838b122b26de7e89840eeb925db5
-
SHA1
c084ff1694f6d2160aec552a4d6ede47a8371a8c
-
SHA256
873bcf864624db9f597ceef76772a3b1b78b30c6eb984415f5d33081d26cb39f
-
SHA512
51bf12eaf8a9ec67b6d55d62a78b57352f80d4c442ad99a1169ee1e07c4d5230e81434cee4bc4822f940b0bdd9e0bce27791b46008167bf94d6f745de9602f94
-
SSDEEP
12288:7TW6JScmD/JzoFw+Ys+6MvnAOkMtdC22IB0Qha/nuZOmwEvYLj8UKZizHc:7TFmoFwuB2gMtd+Tu9hYwS8
Malware Config
Signatures
Files
-
873bcf864624db9f597ceef76772a3b1b78b30c6eb984415f5d33081d26cb39f.exe windows x86
f570d7eadea6f295f347eb83b552b779
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetEvent
GetLastError
FindClose
GetFileType
WriteConsoleW
CreateEventW
FindClose
Sleep
VirtualProtectEx
RemoveDirectoryA
CreateMailslotW
CreateFileMappingW
HeapFree
SetLocalTime
lstrlenA
RemoveDirectoryA
SetStdHandle
CreateDirectoryW
GetModuleHandleA
GetCommandLineA
ResetEvent
OpenEventA
WriteFile
ReleaseMutex
uxtheme
DrawThemeEdge
CloseThemeData
GetThemeTextExtent
GetThemeTextMetrics
OpenThemeData
GetWindowTheme
DrawThemeBackground
IsThemeActive
SetWindowTheme
GetThemeBool
GetThemeSysSize
CloseThemeData
GetThemeColor
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ