Static task
static1
Behavioral task
behavioral1
Sample
a696a3e7362279de29b60c4cd77c8faec288ff568fd9e823fed409b4db4aa784.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a696a3e7362279de29b60c4cd77c8faec288ff568fd9e823fed409b4db4aa784.exe
Resource
win10v2004-20221111-en
General
-
Target
a696a3e7362279de29b60c4cd77c8faec288ff568fd9e823fed409b4db4aa784
-
Size
746KB
-
MD5
663c461529352f8a1ae5bb8f935ab5f6
-
SHA1
ce6f18d75e87a5d8759bb0f45c4878a489c26660
-
SHA256
a696a3e7362279de29b60c4cd77c8faec288ff568fd9e823fed409b4db4aa784
-
SHA512
6f3262a2203e99f27bd9ca3790b5501c559b94fb7255a7a940e447b83395e75adac0b6be7e6d80084be2b49ffda88659b9e7121a86e2e10fca4ab7e3732adce4
-
SSDEEP
12288:Ay3XyyKOZm3lXANKvkCRkdw0rF1DOf72PMdELEG1gZSsJ8gAeXYJJP:AySy3Zm3pANnfDrX3PVLH1XxXeIJJP
Malware Config
Signatures
Files
-
a696a3e7362279de29b60c4cd77c8faec288ff568fd9e823fed409b4db4aa784.exe windows x86
f0089c7356702f698b68a52b3544dbd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
GetCurrentDirectoryW
GlobalLock
SetFileAttributesW
WaitForMultipleObjects
FindVolumeClose
GetFileAttributesA
IsBadReadPtr
CloseHandle
FindVolumeClose
ExitThread
GetEnvironmentVariableW
GetFileType
lstrlenA
MapViewOfFile
GetDriveTypeA
GetModuleHandleA
GetCommandLineA
ReadFile
HeapFree
HeapCreate
GetCommandLineW
EnterCriticalSection
GetFileTime
FindClose
uxtheme
GetThemeTextExtent
CloseThemeData
GetThemeTextMetrics
GetThemeColor
IsThemeActive
GetWindowTheme
CloseThemeData
GetThemeBool
GetThemeEnumValue
DrawThemeBackground
DrawThemeEdge
SetWindowTheme
OpenThemeData
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE