Static task
static1
Behavioral task
behavioral1
Sample
907099780361fbd263d07d02c0da1e136c35aeb56e61dc12adf40edb77aa2165.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
907099780361fbd263d07d02c0da1e136c35aeb56e61dc12adf40edb77aa2165.exe
Resource
win10v2004-20220901-en
General
-
Target
907099780361fbd263d07d02c0da1e136c35aeb56e61dc12adf40edb77aa2165
-
Size
68KB
-
MD5
0c47c3c339a07998cb0799b832e6811d
-
SHA1
43cadf20df6f4c2b3779ca03a36eda8ea71de1fc
-
SHA256
907099780361fbd263d07d02c0da1e136c35aeb56e61dc12adf40edb77aa2165
-
SHA512
26764cbd0c9a001fabf01e75c997bcd13536dd7beda480b19d4d7a640e69436d7e7b19e5e594d2953ebdccfa7438680984b370e6f4879e4681b03b8876a07e8f
-
SSDEEP
1536:wZQIjrlDxUFyz2nzGMfZCJFFno3d61VR3kx9uoFzViphhTX9MxpU0/iZv:wZQKlDxcsfMf4FK61VR3kx9dVgX9s/iZ
Malware Config
Signatures
Files
-
907099780361fbd263d07d02c0da1e136c35aeb56e61dc12adf40edb77aa2165.exe windows x86
21f871d97f1e8b91601466d4eafd8071
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
ReadConsoleA
ReadConsoleA
ReleaseMutex
LoadLibraryW
GetStringTypeW
FindAtomW
lstrlenA
GetPrivateProfileSectionA
DeleteFileW
VirtualProtectEx
ReadConsoleA
Sleep
HeapSize
GetLogicalDrives
SearchPathA
PulseEvent
CloseHandle
GetStartupInfoA
GetLastError
GetDriveTypeA
uxtheme
GetThemeSysSize
OpenThemeData
GetWindowTheme
GetThemeColor
DrawThemeBackground
GetThemeBool
CloseThemeData
SetWindowTheme
GetThemeTextMetrics
CloseThemeData
GetThemeTextExtent
DrawThemeEdge
IsThemeActive
gpedit
ExportRSoPData
BrowseForGPO
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE