Static task
static1
Behavioral task
behavioral1
Sample
c196a2446a46bd6d1e224e44ce36e4a9d2cc4557e534bd93c0e95394f342e9cf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c196a2446a46bd6d1e224e44ce36e4a9d2cc4557e534bd93c0e95394f342e9cf.exe
Resource
win10v2004-20220812-en
General
-
Target
c196a2446a46bd6d1e224e44ce36e4a9d2cc4557e534bd93c0e95394f342e9cf
-
Size
278KB
-
MD5
c201f313ba6f6e928fd8130198fc1818
-
SHA1
419f6a19a452feb62c412c181b1617f080301c8d
-
SHA256
c196a2446a46bd6d1e224e44ce36e4a9d2cc4557e534bd93c0e95394f342e9cf
-
SHA512
c7950258cafed9ac45d4be3a397e8a18f50c538945374f5141ce84636ba3994a9c640d5c46f4e7043d3a1003769a1601ccff8da93da1b96df23d406f18ed735b
-
SSDEEP
6144:t2Iq+YfrQE6ORi/KBgH55aD0rf3wI14WpmT3EO4l8TEVXCL3tPVAiRaUyOg:t2Iq+kfFM/KBK55a4b3wTOAdPL3tVxzy
Malware Config
Signatures
Files
-
c196a2446a46bd6d1e224e44ce36e4a9d2cc4557e534bd93c0e95394f342e9cf.exe windows x86
ae7dd5a69feaa136eb62472feca9e437
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SuspendThread
GetFileAttributesA
LocalSize
ExitProcess
SetLastError
SetFileAttributesW
SetLastError
IsBadReadPtr
GetCommandLineW
ReadFile
GetCurrentDirectoryW
Sleep
GlobalLock
GetFileType
WaitForSingleObject
GetEnvironmentVariableW
CloseHandle
EnterCriticalSection
HeapCreate
MapViewOfFile
GetDriveTypeA
HeapFree
GetCommandLineA
GetFileTime
uxtheme
GetThemeEnumValue
DrawThemeBackground
OpenThemeData
CloseThemeData
IsThemeActive
DrawThemeEdge
GetThemeTextMetrics
CloseThemeData
GetWindowTheme
GetThemeColor
GetThemeTextExtent
GetThemeBool
SetWindowTheme
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE