Static task
static1
Behavioral task
behavioral1
Sample
1b149d552c4407f8524c8e7cb313e624bdce5e129b0033c408aa04e993f0ab8f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1b149d552c4407f8524c8e7cb313e624bdce5e129b0033c408aa04e993f0ab8f.exe
Resource
win10v2004-20220812-en
General
-
Target
1b149d552c4407f8524c8e7cb313e624bdce5e129b0033c408aa04e993f0ab8f
-
Size
746KB
-
MD5
ee43cfa57ea77237a7f271d19ec684f7
-
SHA1
1339239142c4b63f6287ea6fdabf27966cc08ba4
-
SHA256
1b149d552c4407f8524c8e7cb313e624bdce5e129b0033c408aa04e993f0ab8f
-
SHA512
94c8a636cbe01a79a24e417803dcfb208a5bd8fa4efafb85f140a8918ccfc51ce1d2349ca634af9c9c73c91099074e82630f40ff2abd08bf277a34cb6e8dbecb
-
SSDEEP
12288:xSfJmj+IIovAWgBB8j6f4niKZrClRFV9pshhld+fQuqMDdr+dYLAhDjiGPDUg5:iQj3IovAWS8j6OrCF36hldf8Z65jN5
Malware Config
Signatures
Files
-
1b149d552c4407f8524c8e7cb313e624bdce5e129b0033c408aa04e993f0ab8f.exe windows x86
564f56ba632498cbf884853d403d82c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetEnvironmentVariableW
HeapCreate
SetLastError
GetCommandLineW
GlobalLock
GetFileAttributesA
GetFileType
GetDriveTypeA
Sleep
MapViewOfFile
HeapFree
GetFileTime
IsBadReadPtr
GetCurrentDirectoryW
CloseHandle
SetLastError
SuspendThread
ReadFile
GetModuleHandleA
SetFileAttributesW
LocalSize
GetTickCount
WaitForSingleObject
ExitProcess
uxtheme
GetThemeTextMetrics
GetThemeColor
OpenThemeData
DrawThemeBackground
GetThemeTextExtent
CloseThemeData
DrawThemeEdge
CloseThemeData
IsThemeActive
SetWindowTheme
GetThemeBool
GetWindowTheme
GetThemeEnumValue
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE