Static task
static1
Behavioral task
behavioral1
Sample
30f4f2c91304d42d57ca4a6c9105d614d2e0cad036db8dd3763021b6e1802c03.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
30f4f2c91304d42d57ca4a6c9105d614d2e0cad036db8dd3763021b6e1802c03.exe
Resource
win10v2004-20220812-en
General
-
Target
30f4f2c91304d42d57ca4a6c9105d614d2e0cad036db8dd3763021b6e1802c03
-
Size
746KB
-
MD5
5e26a63556e8e78ae807d33bf57ff34a
-
SHA1
db0a8dad079693d4c248c88c52a4ab4c29ce3dba
-
SHA256
30f4f2c91304d42d57ca4a6c9105d614d2e0cad036db8dd3763021b6e1802c03
-
SHA512
571033bd71abcbaca80d3eb67135cf92bf58075fd346683dd18bee54dea2919bc3ee98c5ff8a6e26cba62f5dcdec0772baa764ec804f9612c0a2dd4e8ffde2ee
-
SSDEEP
12288:N5e3YH6pP32QdNeu8WFXDh8FQfzoXJwFow3AYbQ5thmnueK/TH7iyB/1LM:y4O+SN4WLXfzww3BQ7yO/F1
Malware Config
Signatures
Files
-
30f4f2c91304d42d57ca4a6c9105d614d2e0cad036db8dd3763021b6e1802c03.exe windows x86
0deb36aa6e3d2eb5e8c07f9e1ef321af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
GetFileTime
SetFileAttributesW
GetCurrentDirectoryW
lstrlenA
LocalSize
GetDriveTypeA
GetModuleFileNameA
GetFileAttributesA
HeapCreate
GetFileType
IsBadReadPtr
MapViewOfFile
CloseHandle
GetCommandLineW
FindVolumeClose
HeapFree
GetModuleHandleA
WriteFile
GetCommandLineA
ExitThread
CancelIo
WaitForMultipleObjects
EnterCriticalSection
FindClose
uxtheme
OpenThemeData
SetWindowTheme
GetThemeTextExtent
GetThemeBool
DrawThemeEdge
DrawThemeBackground
GetThemeEnumValue
GetWindowTheme
IsThemeActive
CloseThemeData
GetThemeColor
CloseThemeData
GetThemeTextMetrics
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE