Static task
static1
Behavioral task
behavioral1
Sample
7a4715b9faeef0d252327c99b71ffc9dca48383c0fa6ea6f8131597f0c68cd9c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7a4715b9faeef0d252327c99b71ffc9dca48383c0fa6ea6f8131597f0c68cd9c.exe
Resource
win10v2004-20221111-en
General
-
Target
7a4715b9faeef0d252327c99b71ffc9dca48383c0fa6ea6f8131597f0c68cd9c
-
Size
749KB
-
MD5
d183a94edb8bf5e96fffac8d92b73a2e
-
SHA1
11353ae8ce2046665c03424089cb144e88a1109f
-
SHA256
7a4715b9faeef0d252327c99b71ffc9dca48383c0fa6ea6f8131597f0c68cd9c
-
SHA512
f9d470ea59ecafb2ad8ce16e79fdee8e19ed260e6657a2a79a42280bf4bf01ee2b7258a5aebe1735c202fee88440273c42602b2c4d8190110c259ff040df9150
-
SSDEEP
12288:x85aMNlNjc1NUryMa14SifuTCwYWus0KfPXTdZU5Ipxryf5/Q/V+0g3mx4WQ:xGaV1NREY5Fus0KfPyIpx2f5/wVHg3b
Malware Config
Signatures
Files
-
7a4715b9faeef0d252327c99b71ffc9dca48383c0fa6ea6f8131597f0c68cd9c.exe windows x86
2ed22b0a1658a61e98d0f8b76571431e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
SetStdHandle
ResetEvent
FindClose
DeleteFileA
ReleaseMutex
OpenEventA
HeapFree
WriteConsoleW
GetCommandLineA
GetModuleHandleA
Sleep
WriteFile
RemoveDirectoryA
SetLocalTime
GetLastError
FindClose
lstrlenA
GetFileType
CreateDirectoryW
RemoveDirectoryA
CreateEventW
CreateMailslotW
CreateFileMappingW
SetEvent
uxtheme
DrawThemeBackground
GetWindowTheme
SetWindowTheme
GetThemeTextExtent
CloseThemeData
OpenThemeData
IsThemeActive
GetThemeBool
GetThemeTextMetrics
CloseThemeData
DrawThemeEdge
GetThemeColor
GetThemeSysSize
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ