Static task
static1
Behavioral task
behavioral1
Sample
8c1a4b19c1a18f1843486876860fa5de2b33707e5d30dd119a7b8bdecadcf9d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c1a4b19c1a18f1843486876860fa5de2b33707e5d30dd119a7b8bdecadcf9d0.exe
Resource
win10v2004-20221111-en
General
-
Target
8c1a4b19c1a18f1843486876860fa5de2b33707e5d30dd119a7b8bdecadcf9d0
-
Size
767KB
-
MD5
b51bf06dbef474fd920e5d5bf2e1d56f
-
SHA1
8bee93ab335fb268e1982f3c3ae64b0b42e3c7c7
-
SHA256
8c1a4b19c1a18f1843486876860fa5de2b33707e5d30dd119a7b8bdecadcf9d0
-
SHA512
b1966c33d9abc2ef7383c5dc9078401e120db476fe2348dde7e61cd5a92d29580977aa0b0d7978115bbf5401e2e7f058a94fd5bdd2d43221e9bc42da8e5d29e4
-
SSDEEP
12288:MY4EXNelE3TKcZOW568LHIzJxs9hWn5gKDd2WqvOg0YoxqNGAD8:MYnX7DXZOP8LHaA9gHsWVTA
Malware Config
Signatures
Files
-
8c1a4b19c1a18f1843486876860fa5de2b33707e5d30dd119a7b8bdecadcf9d0.exe windows x86
e2630e33e46a7fdc7c3b2b1657116f44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
CreateFileA
OpenEventW
CreateDirectoryW
GetCommandLineW
VirtualProtectEx
ExitProcess
GetStartupInfoA
MapViewOfFile
LoadLibraryA
GetVersion
SetLastError
ReleaseSemaphore
CreatePipe
RemoveDirectoryW
SetLastError
HeapSize
DeleteFileA
GetStdHandle
lstrlenA
RemoveDirectoryW
CreateMutexA
GetFileSize
ReleaseMutex
HeapDestroy
uxtheme
CloseThemeData
GetThemeColor
CloseThemeData
GetThemeBool
DrawThemeEdge
GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
OpenThemeData
SetWindowTheme
GetThemeSysSize
DrawThemeBackground
GetWindowTheme
hhsetup
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE