Static task
static1
Behavioral task
behavioral1
Sample
76347e1b7ad52688c2c15435af0b08b63b8b212f6d019b85d29d833336507a5c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
76347e1b7ad52688c2c15435af0b08b63b8b212f6d019b85d29d833336507a5c.exe
Resource
win10v2004-20221111-en
General
-
Target
76347e1b7ad52688c2c15435af0b08b63b8b212f6d019b85d29d833336507a5c
-
Size
267KB
-
MD5
05df914746b6fe4b5471b36be3910980
-
SHA1
b252c312d38029c8d704009d55560ab1b370d561
-
SHA256
76347e1b7ad52688c2c15435af0b08b63b8b212f6d019b85d29d833336507a5c
-
SHA512
16c6ae22e73773637025ae05441fa177d81af64cf16a7996eb654abc5c8499f7340445b287ef6971235f366f55039613bb282cd76cc030f1b2370dc01403dc2a
-
SSDEEP
6144:j0bFUm2uWLn5AgHtpKSBsLIwim+jrB69ov4Ai0kGOBnU:YpsnFHvsB+jro9ovHJ
Malware Config
Signatures
Files
-
76347e1b7ad52688c2c15435af0b08b63b8b212f6d019b85d29d833336507a5c.exe windows x86
ed57a3a5c39e897511314ec21bfba9e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
VirtualProtect
Sleep
WriteConsoleW
HeapDestroy
DeleteFileA
GetDriveTypeW
GetModuleHandleA
WriteConsoleW
GetStartupInfoA
CancelIo
GetPrivateProfileSectionW
AddAtomW
CopyFileA
SetEvent
GetFileAttributesA
GetProcessHeap
lstrlenW
lstrcpyA
VirtualQueryEx
GetCommandLineA
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
uxtheme
DrawThemeBackground
GetWindowTheme
GetThemeTextMetrics
CloseThemeData
CloseThemeData
DrawThemeEdge
IsThemeActive
GetThemeBool
GetThemeColor
OpenThemeData
GetThemeTextExtent
SetWindowTheme
GetThemeSysSize
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ