Static task
static1
Behavioral task
behavioral1
Sample
6f17e031f22ee9ebfaae3cca74f45458c8e1c03aa32f2ead4e034e3869f65d34.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f17e031f22ee9ebfaae3cca74f45458c8e1c03aa32f2ead4e034e3869f65d34.exe
Resource
win10v2004-20220812-en
General
-
Target
6f17e031f22ee9ebfaae3cca74f45458c8e1c03aa32f2ead4e034e3869f65d34
-
Size
116KB
-
MD5
70064c8f31b5878dfc87e96eb7220f40
-
SHA1
b0e41bc648eb9ea0a740bfa45b36d3751a92ed01
-
SHA256
6f17e031f22ee9ebfaae3cca74f45458c8e1c03aa32f2ead4e034e3869f65d34
-
SHA512
a2a7ab2c09c28a56aa030e714b5d900ebc56e9558592eedb7a9faf6fd705f90b25bdd7ae04aa4063e36052c40fca5920a395c27d0d07cff2caa6b0f475214ad9
-
SSDEEP
3072:/gCESNh0vnbq/vmPbjfcCSojFWBo3pxgTZ1C:/F5hGb/LjFt3paF
Malware Config
Signatures
Files
-
6f17e031f22ee9ebfaae3cca74f45458c8e1c03aa32f2ead4e034e3869f65d34.exe windows x86
32b8f3302b58d3ed68a40c7bf189eb51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
CancelIo
GetCommandLineA
GetPrivateProfileSectionW
VirtualQueryEx
GetStartupInfoA
GetProcessHeap
WriteConsoleW
SetEvent
lstrcpyA
WriteConsoleW
DeleteFileA
GetModuleHandleA
GetFileAttributesA
lstrlenW
CopyFileA
AddAtomW
WriteConsoleW
VirtualProtect
GetDriveTypeW
Sleep
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
uxtheme
CloseThemeData
GetThemeBool
GetWindowTheme
DrawThemeEdge
CloseThemeData
GetThemeTextExtent
GetThemeColor
GetThemeTextMetrics
GetThemeSysSize
OpenThemeData
IsThemeActive
SetWindowTheme
DrawThemeBackground
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ