Static task
static1
Behavioral task
behavioral1
Sample
d3197dbf95820079930ed9d7ef75c9d9d2568a81249180ba2b260c4075933c7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3197dbf95820079930ed9d7ef75c9d9d2568a81249180ba2b260c4075933c7c.exe
Resource
win10v2004-20220812-en
General
-
Target
d3197dbf95820079930ed9d7ef75c9d9d2568a81249180ba2b260c4075933c7c
-
Size
393KB
-
MD5
8d0931779019ac0478db4e7c7fdce414
-
SHA1
b183a02778e18af0c576a4c58c343f6d14621a90
-
SHA256
d3197dbf95820079930ed9d7ef75c9d9d2568a81249180ba2b260c4075933c7c
-
SHA512
af5d5f59a3793e825203ad44f8b19946544c44ec5b214f8453ca7b2f7a70c8406b3965e6ff5d40099ccce9ae20034e534376f42418016584033ee915c45dfe1b
-
SSDEEP
6144:/0hTXqiuuLJvr8plpjLg1bQYcEYhyK1jDtWocbZe82wI2/+VwL4Z:MTXhzL8pHgn301jDEnw82wI2/zL4Z
Malware Config
Signatures
Files
-
d3197dbf95820079930ed9d7ef75c9d9d2568a81249180ba2b260c4075933c7c.exe windows x86
c3400bd1fac722561207e16d084dcd20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
RemoveDirectoryW
FatalExit
OpenEventW
HeapSize
SetLastError
GetStdHandle
GetStartupInfoA
CreateFileMappingW
lstrlenA
ReleaseMutex
VirtualProtect
GetVersion
LoadLibraryA
DeleteFileA
CreateMutexA
CreateDirectoryW
RemoveDirectoryW
MapViewOfFile
CreatePipe
ReleaseSemaphore
CreateFileA
GetCommandLineW
GetFileSize
SetLastError
uxtheme
GetThemeColor
GetThemeSysSize
GetThemeBool
CloseThemeData
GetThemeTextExtent
IsThemeActive
GetWindowTheme
GetThemeTextMetrics
SetWindowTheme
CloseThemeData
DrawThemeEdge
OpenThemeData
DrawThemeBackground
iernonce
RunOnceExProcess
InitCallback
RunOnceExProcess
InitCallback
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE