Static task
static1
Behavioral task
behavioral1
Sample
8f5e8055192a9c0d32d5e5d5413e9069f7fcc31ab415f51d71654da5280b5958.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f5e8055192a9c0d32d5e5d5413e9069f7fcc31ab415f51d71654da5280b5958.exe
Resource
win10v2004-20220812-en
General
-
Target
8f5e8055192a9c0d32d5e5d5413e9069f7fcc31ab415f51d71654da5280b5958
-
Size
807KB
-
MD5
0c56e5d3d9e8b4061feec8bba10dd1c1
-
SHA1
5a0eebf6d2acd1e9fd8b2ccd90babccb9eddbb9e
-
SHA256
8f5e8055192a9c0d32d5e5d5413e9069f7fcc31ab415f51d71654da5280b5958
-
SHA512
ac444c60846decb68942e11476a10fd21ad248689ec8f65e8dcfa97916effc0506c132cd34de146402a991cc1e61a1ef46c8ff91d42d28f00b746cd2414d3c58
-
SSDEEP
12288:W6XR3xm0LqtIefJPrAjgzwgs5qztrXCVn/rQ1iO8dOWv1DgRlFbpDSDSQcZawI:B3x1OKCLEg2YSR/rQ1/8D1sNNuGQcC
Malware Config
Signatures
Files
-
8f5e8055192a9c0d32d5e5d5413e9069f7fcc31ab415f51d71654da5280b5958.exe windows x86
11560d5952552fb5be1d18e86035b793
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenW
GetCommandLineA
CancelIo
WriteConsoleW
LoadLibraryW
CopyFileA
GetDriveTypeW
DeleteFileA
SetEvent
GetStartupInfoA
AddAtomW
GetPrivateProfileSectionW
HeapDestroy
WriteConsoleW
HeapSize
Sleep
GetFileAttributesA
WriteConsoleW
VirtualProtect
lstrcpyA
GetProcessHeap
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
uxtheme
DrawThemeEdge
GetWindowTheme
OpenThemeData
IsThemeActive
CloseThemeData
GetThemeSysSize
GetThemeTextMetrics
GetThemeColor
GetThemeTextExtent
CloseThemeData
DrawThemeBackground
GetThemeBool
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE