Static task
static1
Behavioral task
behavioral1
Sample
9c02a058d28861aa95e257a528484fe06daf906e060b3c4d33f1c2266146a832.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c02a058d28861aa95e257a528484fe06daf906e060b3c4d33f1c2266146a832.exe
Resource
win10v2004-20221111-en
General
-
Target
9c02a058d28861aa95e257a528484fe06daf906e060b3c4d33f1c2266146a832
-
Size
749KB
-
MD5
41c3cbe954412f491391604006aa51f8
-
SHA1
f1700c5aa6c80ae56c5e2f92d7f2b1b8082dab9d
-
SHA256
9c02a058d28861aa95e257a528484fe06daf906e060b3c4d33f1c2266146a832
-
SHA512
5e9f26e6c671f62e8a1576c1f911c40c7eb9b33fe1cd855f2ef515c687cfe3a01ca26e061c9e6e91a61a09d7137872f83d583f0619a077ceb866f0533246d38b
-
SSDEEP
12288:63Sl3MWiP5NkWwykgrMTRi+dnB690wv4MqvVNvoreoKz5Z377af:6K3MhjrgRJdE90wv49UPKzz37
Malware Config
Signatures
Files
-
9c02a058d28861aa95e257a528484fe06daf906e060b3c4d33f1c2266146a832.exe windows x86
3affa96a638ff2e4999819320550a944
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateMailslotW
RemoveDirectoryA
ReleaseMutex
SetLocalTime
GetFileType
WriteConsoleW
SetStdHandle
FindClose
SetEvent
DeleteFileA
FindClose
VirtualProtectEx
CreateDirectoryW
HeapFree
lstrlenA
Sleep
GetLastError
ResetEvent
CreateEventW
CreateFileMappingW
WriteFile
GetCommandLineA
RemoveDirectoryA
OpenEventA
uxtheme
DrawThemeEdge
GetWindowTheme
GetThemeBool
DrawThemeBackground
CloseThemeData
GetThemeSysSize
CloseThemeData
OpenThemeData
GetThemeTextMetrics
SetWindowTheme
GetThemeTextExtent
GetThemeColor
IsThemeActive
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ