Static task
static1
Behavioral task
behavioral1
Sample
63e4f08a63d83bcab3f36e3888c99b6d77ade380d4f2505a25b9b20ad0d51d1e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
63e4f08a63d83bcab3f36e3888c99b6d77ade380d4f2505a25b9b20ad0d51d1e.exe
Resource
win10v2004-20221111-en
General
-
Target
63e4f08a63d83bcab3f36e3888c99b6d77ade380d4f2505a25b9b20ad0d51d1e
-
Size
452KB
-
MD5
d0dc24bdb0247de1ef6dacf17c71204b
-
SHA1
942b156f461f6d83394cc9e537ea1c0b8124a002
-
SHA256
63e4f08a63d83bcab3f36e3888c99b6d77ade380d4f2505a25b9b20ad0d51d1e
-
SHA512
d3bc055549971d8aba5d80655671465b298571fb2a0bd2c9b5c2affa0ee0bdf3959d924f971d407732800314ac18f849269e93fe772efedd8ad8487cf8f6b303
-
SSDEEP
6144:7BjYQzH2Jfb40Pjiyj8NTDJOYeNdzgTU/0MyG1kfkAfKojJnxflecl:lj9WzimiTVaNyU/0Myg3AfDdnp
Malware Config
Signatures
Files
-
63e4f08a63d83bcab3f36e3888c99b6d77ade380d4f2505a25b9b20ad0d51d1e.exe windows x86
5330d4d54033f1ab3f9c6de1c75dd901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
WriteFile
RemoveDirectoryA
GetModuleHandleA
SetStdHandle
SetVolumeLabelA
ExitThread
GetFileType
CreateDirectoryA
FindAtomA
FindClose
SuspendThread
SetLastError
HeapCreate
CreateThread
HeapFree
CloseHandle
GetVersion
GetCommandLineA
IsBadWritePtr
GetDriveTypeA
RemoveDirectoryA
CreateSemaphoreW
ResumeThread
GetModuleFileNameA
uxtheme
GetThemeColor
GetThemeBool
CloseThemeData
GetThemeTextExtent
CloseThemeData
GetThemeTextMetrics
GetWindowTheme
GetThemeSysSize
OpenThemeData
SetWindowTheme
IsThemeActive
DrawThemeBackground
DrawThemeEdge
olesvr32
OleRevokeServer
OleRevokeServer
OleRevokeServer
OleRevokeServer
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 443KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE