Static task
static1
Behavioral task
behavioral1
Sample
c0ea72265a1945214f4064f29ab43791b69f942169a5bdc2fc7c8da06214cc20.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0ea72265a1945214f4064f29ab43791b69f942169a5bdc2fc7c8da06214cc20.exe
Resource
win10v2004-20221111-en
General
-
Target
c0ea72265a1945214f4064f29ab43791b69f942169a5bdc2fc7c8da06214cc20
-
Size
278KB
-
MD5
a55993628ea973a4d12203419143da5f
-
SHA1
573ae1031247098e4d45f8b6e2d913f07d431379
-
SHA256
c0ea72265a1945214f4064f29ab43791b69f942169a5bdc2fc7c8da06214cc20
-
SHA512
980a8293217412de980bd945f856c9a97f9d0189db639c200d23a7f0485f6b1d5af13ac51f13c4e43c5021ec84dd63302072b24bbbbdfc05ccb15e896469a123
-
SSDEEP
6144:ND+WxDeH2kqeFcTL8kXf2x2kgWEpBDsIVJv7Mdo/U:llDBlewf2xNcrDsovAW
Malware Config
Signatures
Files
-
c0ea72265a1945214f4064f29ab43791b69f942169a5bdc2fc7c8da06214cc20.exe windows x86
c98aadb03d620d355c6ee76223d33056
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
HeapFree
FindAtomA
FindClose
GetModuleFileNameA
GetCommandLineA
CreateDirectoryA
RemoveDirectoryA
SetVolumeLabelA
GetVersion
GetTapeStatus
CreateSemaphoreW
SetLastError
GetFileType
ExitThread
Beep
CreatePipe
WaitForMultipleObjects
HeapCreate
GetDriveTypeA
GetModuleHandleA
CloseHandle
AddAtomW
WriteFile
RemoveDirectoryA
uxtheme
CloseThemeData
GetThemeColor
OpenThemeData
GetWindowTheme
SetWindowTheme
IsThemeActive
GetThemeTextExtent
GetThemeBool
CloseThemeData
GetThemeTextMetrics
DrawThemeEdge
DrawThemeBackground
GetThemeSysSize
olesvr32
OleRevokeServer
OleRevokeServer
OleRevokeServer
OleRevokeServer
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE