Static task
static1
Behavioral task
behavioral1
Sample
a8d8b59485ce26524c2d8fc8abaef97791e5cde6d7fb2b99792615eea0ffbf40.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a8d8b59485ce26524c2d8fc8abaef97791e5cde6d7fb2b99792615eea0ffbf40.exe
Resource
win10v2004-20221111-en
General
-
Target
a8d8b59485ce26524c2d8fc8abaef97791e5cde6d7fb2b99792615eea0ffbf40
-
Size
75KB
-
MD5
8827e6988e8e823ddd83ecf776b5d4a7
-
SHA1
e9f56af1c2b90dc3a8c6b82c39e826f6d38f406d
-
SHA256
a8d8b59485ce26524c2d8fc8abaef97791e5cde6d7fb2b99792615eea0ffbf40
-
SHA512
10d9f48312cc3d10796919c1a28a86837f1cf7561e057e5dabab4dac76ced444010e8b009540844a8330d8697f4c40761d9f7aefd1b64743d5b973fc451634cd
-
SSDEEP
1536:lU5sI8ayYtld8bJNzK/h7mSGelMT/UUP32tXKV3nxNu2lplC2/bEw3BWF17xwhHm:e7WLB/L30F11whqnNz/OB/q
Malware Config
Signatures
Files
-
a8d8b59485ce26524c2d8fc8abaef97791e5cde6d7fb2b99792615eea0ffbf40.exe windows x86
4135e9570de0783bb4b708ac8bdc4c6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetFileType
GlobalSize
SetLastError
GetFileTime
IsBadReadPtr
ExitThread
ReadFile
GetDriveTypeA
SetFileAttributesW
HeapCreate
GetEnvironmentVariableW
CloseHandle
HeapFree
MapViewOfFile
GetModuleHandleA
SetLastError
EnterCriticalSection
GetFileAttributesA
SuspendThread
GetCommandLineW
Sleep
GetCurrentDirectoryW
GetCommandLineA
GlobalLock
uxtheme
DrawThemeEdge
CloseThemeData
DrawThemeBackground
GetThemeTextMetrics
GetThemeTextExtent
GetThemeColor
GetThemeEnumValue
CloseThemeData
SetWindowTheme
GetWindowTheme
GetThemeBool
IsThemeActive
OpenThemeData
deskmon
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE