Static task
static1
Behavioral task
behavioral1
Sample
2873dbec8eee7c9689db517723e827a5c50e7b143491bc482929c1fa1c43fb1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2873dbec8eee7c9689db517723e827a5c50e7b143491bc482929c1fa1c43fb1d.exe
Resource
win10v2004-20220812-en
General
-
Target
2873dbec8eee7c9689db517723e827a5c50e7b143491bc482929c1fa1c43fb1d
-
Size
807KB
-
MD5
0e7ca2d1acdfe8e31d00ec2526b8c082
-
SHA1
3b7ca6ca0caaa7f9c2fa5e47f087e98bab89729d
-
SHA256
2873dbec8eee7c9689db517723e827a5c50e7b143491bc482929c1fa1c43fb1d
-
SHA512
bde16c199d6d0dc524a063c42d3fdb24f3aaa3c96afdf49308d32a081a466becd4374f0bd96adc6d72d769068fe30f0c6eb72a3b1f3f721713dc91cad63daeee
-
SSDEEP
12288:UuCGpx/QEuBVl0jxLU3tAaiUaqYxUxz1EPVqzysqJA9wyykUcUsdr7:hCGT/Q1VlCxLStDCCx5AorU5A7
Malware Config
Signatures
Files
-
2873dbec8eee7c9689db517723e827a5c50e7b143491bc482929c1fa1c43fb1d.exe windows x86
6fb00b03a21826f10d6939ce2ff78044
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
lstrlenW
GetStartupInfoA
VirtualProtect
DeleteFileA
WriteConsoleW
CancelIo
WriteConsoleW
SetEvent
HeapDestroy
GetProcessHeap
GetDriveTypeW
AddAtomW
Sleep
LoadLibraryW
GetCommandLineA
HeapSize
lstrcpyA
GetPrivateProfileSectionW
WriteConsoleW
CopyFileA
mmcndmgr
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
uxtheme
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
OpenThemeData
GetThemeTextExtent
DrawThemeBackground
SetWindowTheme
GetThemeSysSize
GetThemeBool
GetThemeColor
IsThemeActive
GetWindowTheme
CloseThemeData
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE