Static task
static1
Behavioral task
behavioral1
Sample
a404cc6904a0b9aedd91f7cd0c03e3479517de1dc28e13a27edfdfa55b3edb31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a404cc6904a0b9aedd91f7cd0c03e3479517de1dc28e13a27edfdfa55b3edb31.exe
Resource
win10v2004-20221111-en
General
-
Target
a404cc6904a0b9aedd91f7cd0c03e3479517de1dc28e13a27edfdfa55b3edb31
-
Size
198KB
-
MD5
4d70c317528276c188254464577f766a
-
SHA1
1a530f5115d37d992a1d2725eb68339270f9b5b5
-
SHA256
a404cc6904a0b9aedd91f7cd0c03e3479517de1dc28e13a27edfdfa55b3edb31
-
SHA512
e01b35c6dc4455b32c013ddb9ee72f8e343232bc2571cb8c603b2c3d85bee213bf450bab1407c0f0383018aefe8f624dec8d1f79b302991e2b4cd248904f344e
-
SSDEEP
6144:tadOfCPMQtuc4W90b569wXi4Fjf8daW2/V:taQ6P1oWm96udFjLWC
Malware Config
Signatures
Files
-
a404cc6904a0b9aedd91f7cd0c03e3479517de1dc28e13a27edfdfa55b3edb31.exe windows x86
a4a21d64d0c0a96672279c5914a3534b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
SetFileAttributesW
EnterCriticalSection
GetFileTime
SetLastError
GetCommandLineW
CloseHandle
GetVersion
Sleep
IsBadReadPtr
GetModuleHandleA
VirtualAlloc
GetFileType
SetLastError
RemoveDirectoryA
ExitProcess
ReadFile
HeapSize
GetEnvironmentVariableW
CreateFileA
FindAtomW
GetFileAttributesA
DeleteFileW
WaitForSingleObject
GetCurrentDirectoryW
uxtheme
DrawThemeEdge
OpenThemeData
GetThemeEnumValue
CloseThemeData
IsThemeActive
DrawThemeBackground
CloseThemeData
GetWindowTheme
GetThemeTextExtent
GetThemeTextMetrics
SetWindowTheme
GetThemeColor
GetThemeBool
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ