Static task
static1
Behavioral task
behavioral1
Sample
94a257d8a707471e8806153a38097fa3d1ecbe068c917f138e01b6d287370e56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94a257d8a707471e8806153a38097fa3d1ecbe068c917f138e01b6d287370e56.exe
Resource
win10v2004-20221111-en
General
-
Target
94a257d8a707471e8806153a38097fa3d1ecbe068c917f138e01b6d287370e56
-
Size
278KB
-
MD5
cef60c7abfefa4349b35c2e7903b9e97
-
SHA1
091cbda29a9f823e694076746655aef7ea6ede1b
-
SHA256
94a257d8a707471e8806153a38097fa3d1ecbe068c917f138e01b6d287370e56
-
SHA512
be21c30959b90d734dc44c8e4f9b41c1fc5a4679ce97c7b6ade9b2d47a22b878188fee7361932217f3f12385d0551cef4a1878b4a4ac97220f97adddd1a96ce0
-
SSDEEP
6144:7wWmZ7einl4sNjKJgEABca05TJFE3xKNgOrexYz:7wWmZ7pXkidyHd+KNgOR
Malware Config
Signatures
Files
-
94a257d8a707471e8806153a38097fa3d1ecbe068c917f138e01b6d287370e56.exe windows x86
1c9d1f7c69d6dde3ec0b0ea9d2b39f6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
SuspendThread
SetLastError
WaitForSingleObject
ReadFile
GetDriveTypeA
GetFileTime
GetCommandLineA
MapViewOfFile
GetCurrentDirectoryW
CloseHandle
GetEnvironmentVariableW
Sleep
ExitThread
SetFileAttributesW
HeapCreate
GetFileType
GlobalLock
GetFileAttributesA
SetLastError
GetCommandLineW
GlobalSize
HeapFree
GetModuleHandleA
EnterCriticalSection
uxtheme
IsThemeActive
GetThemeTextExtent
CloseThemeData
GetThemeEnumValue
GetThemeBool
DrawThemeEdge
CloseThemeData
GetWindowTheme
SetWindowTheme
DrawThemeBackground
GetThemeColor
OpenThemeData
GetThemeTextMetrics
deskmon
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE