Static task
static1
Behavioral task
behavioral1
Sample
84bb065bb431225dcd9b6dea9e573f9d3bbdb303cca73a01b5b2eff3bb91dd82.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
84bb065bb431225dcd9b6dea9e573f9d3bbdb303cca73a01b5b2eff3bb91dd82.exe
Resource
win10v2004-20221111-en
General
-
Target
84bb065bb431225dcd9b6dea9e573f9d3bbdb303cca73a01b5b2eff3bb91dd82
-
Size
746KB
-
MD5
5e30446c1e3af48fe0a0fcc59c22e598
-
SHA1
477de7ef13cf2be992b7c3cff41b52bd165e18cc
-
SHA256
84bb065bb431225dcd9b6dea9e573f9d3bbdb303cca73a01b5b2eff3bb91dd82
-
SHA512
1bcc923c47dd5dd9b3138a5ccc2f629464f14335aecb6c6a42a3e31688e7f1fb1ae11e764aff8521f85af09375894341f06370f1c60ef10a76d2b86b805e258f
-
SSDEEP
12288:/8/PbvIApJf2ETSKu5xqnwiwOthesGRFwFQsuUlHXLtc3O6qUY/8nkDp:0LvdjIqJ2XwLhc3O688n6
Malware Config
Signatures
Files
-
84bb065bb431225dcd9b6dea9e573f9d3bbdb303cca73a01b5b2eff3bb91dd82.exe windows x86
804594c74c71602ce13b2d133b02ddc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
MapViewOfFile
GetCommandLineW
GetEnvironmentVariableW
ExitThread
lstrlenA
GetDriveTypeA
ReadFile
WaitForMultipleObjects
GlobalLock
GetFileAttributesA
GetFileType
GetModuleHandleA
GetCurrentDirectoryW
GetFileTime
FindVolumeClose
IsBadReadPtr
HeapCreate
GetCommandLineA
EnterCriticalSection
FindClose
SetFileAttributesW
CloseHandle
LocalSize
HeapFree
uxtheme
CloseThemeData
OpenThemeData
SetWindowTheme
DrawThemeBackground
GetThemeTextMetrics
GetThemeEnumValue
GetThemeBool
GetWindowTheme
DrawThemeEdge
CloseThemeData
GetThemeColor
IsThemeActive
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE