Static task
static1
Behavioral task
behavioral1
Sample
8a69f954fcf755954c9083da44684fde9e59b44fe659756730a885c83ce0b91c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8a69f954fcf755954c9083da44684fde9e59b44fe659756730a885c83ce0b91c.exe
Resource
win10v2004-20221111-en
General
-
Target
8a69f954fcf755954c9083da44684fde9e59b44fe659756730a885c83ce0b91c
-
Size
767KB
-
MD5
36b4be141d352efee07c8e9b08318f09
-
SHA1
3a8289f4b1b73607b9d5523a7287255024206759
-
SHA256
8a69f954fcf755954c9083da44684fde9e59b44fe659756730a885c83ce0b91c
-
SHA512
9a1cfe98cd045aa8aadd51f6c9e2520b0b57b13e3d9996670a611452c0864200e50cb66646362e3f3aa512467bc2d250588e125daf3931cd1a9153d6f87feb4d
-
SSDEEP
12288:k2vqaMmHbOxAxvqsZpzLsvvAer3MzYQtIf96WuoDdM97d9nVSsIBfnvl7UjrHoN8:k2vqa57OCxFrsger3yFOf96Wuox67d9j
Malware Config
Signatures
Files
-
8a69f954fcf755954c9083da44684fde9e59b44fe659756730a885c83ce0b91c.exe windows x86
90f92bd1aa2f0cc680768811ef8531d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
RemoveDirectoryW
lstrlenA
CreateFileMappingW
ReleaseMutex
RemoveDirectoryW
SetLastError
VirtualProtectEx
OpenEventW
GetCommandLineW
LoadLibraryA
CreatePipe
DeleteFileA
ReleaseSemaphore
GetStdHandle
HeapSize
GetFileSize
HeapDestroy
GetVersion
CreateMutexA
CreateDirectoryW
CreateFileA
SetLastError
MapViewOfFile
GetStartupInfoA
uxtheme
GetThemeBool
OpenThemeData
GetThemeColor
DrawThemeBackground
CloseThemeData
GetThemeTextMetrics
GetThemeSysSize
GetThemeTextExtent
CloseThemeData
SetWindowTheme
GetWindowTheme
IsThemeActive
DrawThemeEdge
hhsetup
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
??0CFIFOString@@QAE@XZ
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE