Static task
static1
Behavioral task
behavioral1
Sample
252af286e48a7ce409119bcc6ad3e2973bbc2c7525a2dd80d29bb3451ddff1fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
252af286e48a7ce409119bcc6ad3e2973bbc2c7525a2dd80d29bb3451ddff1fd.exe
Resource
win10v2004-20220812-en
General
-
Target
252af286e48a7ce409119bcc6ad3e2973bbc2c7525a2dd80d29bb3451ddff1fd
-
Size
451KB
-
MD5
ab4af993d8f3259d744e8ec014cfb732
-
SHA1
77753609188e716809c2ef71b2a664cabf02498e
-
SHA256
252af286e48a7ce409119bcc6ad3e2973bbc2c7525a2dd80d29bb3451ddff1fd
-
SHA512
4067c6a84d08d96c407d0f8423dec5bc1601adf3b815e7d39319171f91f08f72d257d1f482cf373d1282e796ae353899ec4235e8f5f03fd6990cb46a62815f77
-
SSDEEP
6144:LkL/kK5iyXKA6P196JHZLLDoqPeGn7tJBMOuwgz0wW07MpezITXcntdxa8Wg2riv:AoK5sA6r61doqPFuwJ0WXctXa80ri
Malware Config
Signatures
Files
-
252af286e48a7ce409119bcc6ad3e2973bbc2c7525a2dd80d29bb3451ddff1fd.exe windows x86
3695503a8545b203de38cefc5ff5bb7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
FindClose
GetDriveTypeA
FindVolumeClose
HeapCreate
WaitForMultipleObjects
HeapFree
WriteFile
GetFileTime
GetFileAttributesA
GetFileType
GetCommandLineA
lstrlenA
ExitThread
CloseHandle
GetCurrentDirectoryW
GetModuleFileNameA
GetCommandLineW
LocalSize
EnterCriticalSection
MapViewOfFile
CancelIo
GetModuleHandleA
IsBadReadPtr
FindVolumeClose
uxtheme
DrawThemeBackground
GetThemeEnumValue
CloseThemeData
GetThemeColor
GetThemeBool
IsThemeActive
GetThemeTextExtent
GetWindowTheme
OpenThemeData
SetWindowTheme
DrawThemeEdge
CloseThemeData
GetThemeTextMetrics
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE