Static task
static1
Behavioral task
behavioral1
Sample
90869d11bbed3d171dfcf7c7dbd1e8b8b383874fcf3ebf0b2cdd62746ba0b8ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90869d11bbed3d171dfcf7c7dbd1e8b8b383874fcf3ebf0b2cdd62746ba0b8ab.exe
Resource
win10v2004-20221111-en
General
-
Target
90869d11bbed3d171dfcf7c7dbd1e8b8b383874fcf3ebf0b2cdd62746ba0b8ab
-
Size
452KB
-
MD5
c651d09d92b84713ab189d755bb3d9dd
-
SHA1
16f84c8075d4cf816f54c523c6316fbc8f857270
-
SHA256
90869d11bbed3d171dfcf7c7dbd1e8b8b383874fcf3ebf0b2cdd62746ba0b8ab
-
SHA512
8eadb9ca90f17cf49f63acd6f1c5443432b85c46e7b58c5e9d2497f11fe0edd3a7acd8f8717fe5550056e3f626a39def9ff6a36221d2fa7e422f5939fee0163a
-
SSDEEP
12288:AHtmZD4b55K7gvvr4sE7l3XWEZLorcjks/3fl5JF67cOn7qp:AR5w3zZ8rcksPf67cuq
Malware Config
Signatures
Files
-
90869d11bbed3d171dfcf7c7dbd1e8b8b383874fcf3ebf0b2cdd62746ba0b8ab.exe windows x86
57fee69a743d07c095326bee95da6e18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
SetLastError
GlobalLock
GetFileType
LocalSize
Sleep
GetFileAttributesA
ReadFile
GetCommandLineA
HeapFree
CloseHandle
GetModuleHandleA
GetFileTime
SetLastError
EnterCriticalSection
GetCommandLineW
GetEnvironmentVariableW
IsBadReadPtr
SetFileAttributesW
GetCurrentDirectoryW
HeapCreate
WaitForSingleObject
GetDriveTypeA
SuspendThread
ExitProcess
uxtheme
GetThemeColor
CloseThemeData
IsThemeActive
DrawThemeEdge
GetWindowTheme
CloseThemeData
GetThemeEnumValue
DrawThemeBackground
GetThemeTextMetrics
GetThemeBool
OpenThemeData
GetThemeTextExtent
SetWindowTheme
deskmon
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 445KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE