Static task
static1
Behavioral task
behavioral1
Sample
76a41b1c416c1bd456cc6bf3f434be08b9b6fa44d8ec6c8c5da6dfa1ae20a7b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
76a41b1c416c1bd456cc6bf3f434be08b9b6fa44d8ec6c8c5da6dfa1ae20a7b8.exe
Resource
win10v2004-20221111-en
General
-
Target
76a41b1c416c1bd456cc6bf3f434be08b9b6fa44d8ec6c8c5da6dfa1ae20a7b8
-
Size
748KB
-
MD5
11886e5320450a740b491e76f9669458
-
SHA1
1a9510d3c146b89c688baa4521393335b740f50c
-
SHA256
76a41b1c416c1bd456cc6bf3f434be08b9b6fa44d8ec6c8c5da6dfa1ae20a7b8
-
SHA512
26376219995ca46302c60ad20a5ec4ce097970c1bc7c2e8a9642a305cf30f4f442b8b91a0a9714bd821f4006e8c254f11b46664516a641a198ca90a0e8ae4755
-
SSDEEP
12288:JbTKeUvE3Y40WPFR/7sxEf2OKL8UF1rPin+suiyyAztK4scWm7bSHsecv+tLgeAB:JuvQYaFRUvOKL8UF1ATuuAfsc5bSMe2x
Malware Config
Signatures
Files
-
76a41b1c416c1bd456cc6bf3f434be08b9b6fa44d8ec6c8c5da6dfa1ae20a7b8.exe windows x86
dadf922e83b74e58bb256f3d4e48489c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetFileTime
ExitThread
IsBadReadPtr
GetCommandLineA
GetFileType
LocalSize
FindClose
HeapCreate
GetModuleFileNameA
HeapFree
WriteFile
FindVolumeClose
GetFileAttributesA
GetDriveTypeA
GetModuleHandleA
CloseHandle
MapViewOfFile
GetCurrentDirectoryW
WaitForMultipleObjects
FindVolumeClose
CancelIo
GetCommandLineW
SetFileAttributesW
EnterCriticalSection
uxtheme
GetThemeTextMetrics
GetThemeColor
DrawThemeBackground
CloseThemeData
IsThemeActive
OpenThemeData
CloseThemeData
GetThemeEnumValue
GetThemeBool
GetThemeTextExtent
SetWindowTheme
DrawThemeEdge
GetWindowTheme
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE