Static task
static1
Behavioral task
behavioral1
Sample
926ae05ef04e4ac8cc31d9e59c357464ac026129673a522171ca52a5506ee661.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
926ae05ef04e4ac8cc31d9e59c357464ac026129673a522171ca52a5506ee661.exe
Resource
win10v2004-20220901-en
General
-
Target
926ae05ef04e4ac8cc31d9e59c357464ac026129673a522171ca52a5506ee661
-
Size
767KB
-
MD5
29261fb53715f59450dc11698854ccdf
-
SHA1
454349346b5d590912327baf6ef280069798e7db
-
SHA256
926ae05ef04e4ac8cc31d9e59c357464ac026129673a522171ca52a5506ee661
-
SHA512
0e513ef5c331dd9479a989137b7b77bc5818d633ae18e3ba741b419558b69906307ff09a12a9c6de03bf0bc7a1f0abc73d56e63c427a45eea44b0e084ed80b11
-
SSDEEP
12288:JtInds9v7uC/R35+DrGuUiCsVKjG9OvsbjpoB/ijwuH4YygdCEzXDSC5hYMqOpie:8ndat/R3wvCsIj+as3RhH4+CEjNDOOEr
Malware Config
Signatures
Files
-
926ae05ef04e4ac8cc31d9e59c357464ac026129673a522171ca52a5506ee661.exe windows x86
f324408e36639e416bb59022e46d30e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
VirtualProtectEx
SetLastError
DeleteFileA
GetStdHandle
ReleaseSemaphore
ExitProcess
SetLastError
HeapDestroy
ReleaseMutex
GetCommandLineW
GetFileSize
LoadLibraryA
HeapSize
GetStartupInfoA
RemoveDirectoryW
CreateMutexA
CreateDirectoryW
GetVersion
CreateFileMappingW
OpenEventW
CreatePipe
MapViewOfFile
CreateFileA
RemoveDirectoryW
uxtheme
DrawThemeEdge
IsThemeActive
GetWindowTheme
GetThemeBool
GetThemeTextMetrics
SetWindowTheme
CloseThemeData
DrawThemeBackground
CloseThemeData
GetThemeTextExtent
GetThemeColor
OpenThemeData
GetThemeSysSize
feclient
FeClientInitialize
FeClientInitialize
FeClientInitialize
FeClientInitialize
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE