Static task
static1
Behavioral task
behavioral1
Sample
7d813a6823cdbd96caecd29374535bc70e6e9d166ecd794259ba274bc9e9b94c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7d813a6823cdbd96caecd29374535bc70e6e9d166ecd794259ba274bc9e9b94c.exe
Resource
win10v2004-20221111-en
General
-
Target
7d813a6823cdbd96caecd29374535bc70e6e9d166ecd794259ba274bc9e9b94c
-
Size
746KB
-
MD5
f35a1aee262defea097afa07c1397425
-
SHA1
48bf4e5b6c24218de7e79c28afc6859225f6836c
-
SHA256
7d813a6823cdbd96caecd29374535bc70e6e9d166ecd794259ba274bc9e9b94c
-
SHA512
0d9b4ec679fe40c598d7de289f0fd8bd6eba94d23aa787e7b08d23e874ffea8d524a52249106cf6601384b6708d44b9ae3fd61f75de972137916477a97f71b4e
-
SSDEEP
12288:5w628fbCPFzqNmFS7bfdTGYrizr5U1/s3Hplgowal2yOMStexo9fKdV6/kqjezgY:FrfbCPFomF+D+ZUC3JlgUlu6xo86/kn8
Malware Config
Signatures
Files
-
7d813a6823cdbd96caecd29374535bc70e6e9d166ecd794259ba274bc9e9b94c.exe windows x86
637a9971a1444354b987eaaa16989e77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetFileType
FindVolumeClose
WaitForMultipleObjects
GetDriveTypeA
LocalSize
GetFileAttributesA
GlobalLock
SetFileAttributesW
GetEnvironmentVariableW
GetModuleHandleA
GetCommandLineA
HeapFree
HeapCreate
EnterCriticalSection
FindClose
IsBadReadPtr
MapViewOfFile
lstrlenA
CloseHandle
FindVolumeClose
GetCommandLineW
GetFileTime
ExitThread
ReadFile
uxtheme
IsThemeActive
DrawThemeBackground
CloseThemeData
GetThemeColor
GetThemeTextExtent
GetWindowTheme
GetThemeTextMetrics
GetThemeEnumValue
GetThemeBool
CloseThemeData
OpenThemeData
SetWindowTheme
DrawThemeEdge
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE