Static task
static1
Behavioral task
behavioral1
Sample
c5aabb82f42610bab6c40196ff86dc83d7e7b6eafa96bcd76e9607681b972611.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5aabb82f42610bab6c40196ff86dc83d7e7b6eafa96bcd76e9607681b972611.exe
Resource
win10v2004-20220812-en
General
-
Target
c5aabb82f42610bab6c40196ff86dc83d7e7b6eafa96bcd76e9607681b972611
-
Size
22KB
-
MD5
70fadb54f4bcd0b09809a4b29c25eb81
-
SHA1
c41e77deb0cbe01689634c7d76718719dec45eb7
-
SHA256
c5aabb82f42610bab6c40196ff86dc83d7e7b6eafa96bcd76e9607681b972611
-
SHA512
56561d3c25382e1c587bfcbf06830f169d6883fbbd890bc8fe606649ed0ce9b9b5692407df23b4b40fe7128cfdfab8fe938c2b3e083a7869caffc003c87fd7ff
-
SSDEEP
384:91N8yrreIq2+mC6VNwUK3qxgAOglLjum:Lyy7qHmHVNwdwB1
Malware Config
Signatures
Files
-
c5aabb82f42610bab6c40196ff86dc83d7e7b6eafa96bcd76e9607681b972611.exe windows x86
b138bb2cea08e78520713a530a6855cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetFileAttributesA
SuspendThread
GetFileType
GetFileTime
GetCommandLineA
GetCommandLineW
WaitForSingleObject
GetEnvironmentVariableW
IsBadReadPtr
ReadFile
CloseHandle
SetLastError
LocalSize
GetModuleHandleA
ExitProcess
HeapFree
MapViewOfFile
GlobalLock
SetFileAttributesW
SetLastError
HeapCreate
GetDriveTypeA
EnterCriticalSection
GetCurrentDirectoryW
uxtheme
SetWindowTheme
GetThemeColor
GetWindowTheme
GetThemeEnumValue
GetThemeTextMetrics
CloseThemeData
DrawThemeBackground
IsThemeActive
CloseThemeData
OpenThemeData
DrawThemeEdge
GetThemeBool
GetThemeTextExtent
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE