Static task
static1
Behavioral task
behavioral1
Sample
f1c946e26c3bf3e7e4a8e8f50fdb6b63e065c2e463d6b003d3ba615992acb5e2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f1c946e26c3bf3e7e4a8e8f50fdb6b63e065c2e463d6b003d3ba615992acb5e2.exe
Resource
win10v2004-20221111-en
General
-
Target
f1c946e26c3bf3e7e4a8e8f50fdb6b63e065c2e463d6b003d3ba615992acb5e2
-
Size
432KB
-
MD5
22c798992e9faceb4e255cdd8681cbce
-
SHA1
0acacedabd07418c3354af6253225ba7c213bc55
-
SHA256
f1c946e26c3bf3e7e4a8e8f50fdb6b63e065c2e463d6b003d3ba615992acb5e2
-
SHA512
2e1b93e70f020aea2e7928b2b2ec0bcc3cd06607a258fcf8e7e03a7fafb9c62505a6e2566d79f91d9f20fcaba585b2c1a51e4f407936345f7baa4f708fa73ec1
-
SSDEEP
12288:HZqHY476UREAh8JDC5tGu0HNuku/nJBsjuO1/8DyG:HZwc6SHNqBsh/2
Malware Config
Signatures
Files
-
f1c946e26c3bf3e7e4a8e8f50fdb6b63e065c2e463d6b003d3ba615992acb5e2.exe windows x86
c4330495aa40a2aadff8e36659bec9dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
GetThemeBool
GetThemeSysBool
SetWindowTheme
GetThemeTextMetrics
GetThemeColor
GetThemeSysSize
GetThemeFont
DrawThemeEdge
GetThemeInt
IsThemeActive
GetThemeTextExtent
DrawThemeBackground
CloseThemeData
OpenThemeData
esent
JetBeginTransaction
JetCloseTable
JetCloseDatabase
JetCloseFile
JetCommitTransaction
kernel32
GetLocaleInfoW
CreateMutexA
GetProcAddress
CopyFileA
ReadConsoleA
WaitForSingleObjectEx
TlsGetValue
CreateEventA
GetModuleHandleA
GetLocalTime
CreateDirectoryW
HeapFree
OpenEventA
dhcpcsvc
DhcpFreeMem
McastApiStartup
shimeng
SE_InstallBeforeInit
SE_DllLoaded
SE_InstallAfterInit
user32
GetTopWindow
DrawTextExA
InsertMenuW
CreateDialogParamA
DrawStateA
SetFocus
CreateWindowExA
LoadImageA
CharToOemW
GetMessageW
LoadBitmapA
ChangeMenuW
IsDialogMessageW
LoadCursorA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ