Static task
static1
Behavioral task
behavioral1
Sample
89131854946cabdb296de21cd36d78dd9cf3d816dcd7e502779ed2c240226d4e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
89131854946cabdb296de21cd36d78dd9cf3d816dcd7e502779ed2c240226d4e.exe
Resource
win10v2004-20221111-en
General
-
Target
89131854946cabdb296de21cd36d78dd9cf3d816dcd7e502779ed2c240226d4e
-
Size
102KB
-
MD5
ebc6865a8a940f87970430c5da4d6b35
-
SHA1
9a58bdcc7c7cb18fcda238627d6988efc009a600
-
SHA256
89131854946cabdb296de21cd36d78dd9cf3d816dcd7e502779ed2c240226d4e
-
SHA512
4912fec76e39a8634d9e984547081de3c454033567cd83b58d09fef762a7773e9be3f305fbcf9fc278a0888da87277d57907cd2960d6195385e7c5dd65dcc319
-
SSDEEP
1536:l14MNtQVu9hBehOs8Dfmu5EBHVJI9EXBQ/qPTR0m1jBH152lwHzE0OL98H:QuQhCDfmu5SDI9cBQ8v5ObXJ8H
Malware Config
Signatures
Files
-
89131854946cabdb296de21cd36d78dd9cf3d816dcd7e502779ed2c240226d4e.exe windows x86
5a731f386348a029c68c04968b3a2f42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
EnterCriticalSection
FindVolumeClose
ExitThread
GetFileTime
CloseHandle
GetEnvironmentVariableW
GetDriveTypeA
GetCommandLineW
GetFileType
HeapFree
FindVolumeClose
GetModuleHandleA
LocalSize
GetCurrentDirectoryW
ReadFile
HeapCreate
lstrlenA
SetFileAttributesW
FindClose
GetCommandLineA
WaitForMultipleObjects
MapViewOfFile
GlobalLock
GetFileAttributesA
uxtheme
CloseThemeData
GetWindowTheme
CloseThemeData
GetThemeTextMetrics
DrawThemeBackground
DrawThemeEdge
IsThemeActive
SetWindowTheme
GetThemeColor
OpenThemeData
GetThemeEnumValue
GetThemeBool
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE