Static task
static1
Behavioral task
behavioral1
Sample
5a134efe1338ea611a1971aee45d708e3197c12b20ac5bdcc2f4f5ec7d4a4624.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a134efe1338ea611a1971aee45d708e3197c12b20ac5bdcc2f4f5ec7d4a4624.exe
Resource
win10v2004-20220812-en
General
-
Target
5a134efe1338ea611a1971aee45d708e3197c12b20ac5bdcc2f4f5ec7d4a4624
-
Size
54KB
-
MD5
1145f2964d2e95cd0302679a6b6021f4
-
SHA1
2abf0f935d22495849279f09ca671a8c2f42cb6b
-
SHA256
5a134efe1338ea611a1971aee45d708e3197c12b20ac5bdcc2f4f5ec7d4a4624
-
SHA512
e4cb44156c60a6386d52ae80f7b7e47e470e201df2a3a7a194a4784fec6e70539a48fd48b5f9cf6acc2131ec03741c51233f08e20c3d61b96a6f05d9d4b1656e
-
SSDEEP
768:OuuYRNj6vO5gl69z8bmi6m8+/U0tePEaQVNFi1WVAbceGkgeg0eY:dVfGl69z8t6m8LQVNhOpngu
Malware Config
Signatures
Files
-
5a134efe1338ea611a1971aee45d708e3197c12b20ac5bdcc2f4f5ec7d4a4624.exe windows x86
0951b0874d30bf71282e141329dc3417
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
HeapCreate
EnterCriticalSection
LocalSize
GetEnvironmentVariableW
FindVolumeClose
GetCommandLineA
FindClose
GetFileTime
FindVolumeClose
SetFileAttributesW
ReadFile
HeapFree
WaitForMultipleObjects
GetModuleHandleA
GetCommandLineW
GetFileType
GetDriveTypeA
ExitThread
CloseHandle
MapViewOfFile
GetFileAttributesA
GlobalLock
GetCurrentDirectoryW
lstrlenA
uxtheme
GetThemeTextExtent
GetWindowTheme
DrawThemeEdge
CloseThemeData
SetWindowTheme
CloseThemeData
GetThemeBool
GetThemeEnumValue
OpenThemeData
GetThemeTextMetrics
IsThemeActive
DrawThemeBackground
GetThemeColor
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qudlwyt Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE