Static task
static1
Behavioral task
behavioral1
Sample
65087f418c19e816c44ef74fe2f875d0c9c2d6543b49dc55353175adcedc62ee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
65087f418c19e816c44ef74fe2f875d0c9c2d6543b49dc55353175adcedc62ee.exe
Resource
win10v2004-20220812-en
General
-
Target
65087f418c19e816c44ef74fe2f875d0c9c2d6543b49dc55353175adcedc62ee
-
Size
749KB
-
MD5
3805294783e517eaa0a1786d46089a38
-
SHA1
bde4101d2bff335ca329dcac3518839a92e6e36e
-
SHA256
65087f418c19e816c44ef74fe2f875d0c9c2d6543b49dc55353175adcedc62ee
-
SHA512
96aa679533c5c083e7aa1ccc3f162f2efbc878217f4d6e33392473f5b6ef179125ab2e8e50812f5d95d24c980b160b48b46427f523feda6e203f6f6d6b77bb10
-
SSDEEP
12288:O3QCdULgLHzucm5zFxu8WWfAXBYepIPJByk43vufUwo56MjL97PKrGc:O3JUqzS5Xu3WwYepIhwkZUwKtlSf
Malware Config
Signatures
Files
-
65087f418c19e816c44ef74fe2f875d0c9c2d6543b49dc55353175adcedc62ee.exe windows x86
ef0e70037be3a3d4737751e0f0af16f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateEventW
SetLocalTime
RemoveDirectoryA
WriteFile
CreateMailslotW
HeapFree
ResetEvent
CreateFileMappingW
VirtualProtectEx
FindClose
ReleaseMutex
SetEvent
GetModuleHandleA
GetFileType
GetCommandLineA
RemoveDirectoryA
FindClose
DeleteFileA
OpenEventA
CreateDirectoryW
WriteConsoleW
Sleep
lstrlenA
SetStdHandle
uxtheme
CloseThemeData
OpenThemeData
GetWindowTheme
GetThemeColor
SetWindowTheme
CloseThemeData
GetThemeBool
DrawThemeBackground
GetThemeSysSize
DrawThemeEdge
IsThemeActive
GetThemeTextExtent
GetThemeTextMetrics
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ