Static task
static1
Behavioral task
behavioral1
Sample
3dd154a36d7a74a61c82132c0d4579bd9fe51b5154499082da83bd144c022b8c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3dd154a36d7a74a61c82132c0d4579bd9fe51b5154499082da83bd144c022b8c.exe
Resource
win10v2004-20221111-en
General
-
Target
3dd154a36d7a74a61c82132c0d4579bd9fe51b5154499082da83bd144c022b8c
-
Size
746KB
-
MD5
af855c4682211aa5ba93db48788bc694
-
SHA1
6c7edfc4090ef430c17d62e217bc0470a89c1430
-
SHA256
3dd154a36d7a74a61c82132c0d4579bd9fe51b5154499082da83bd144c022b8c
-
SHA512
473fc0c58277e7ac3a13a4e640c1110d1ed984d9f89e0131e78c7a53a884003547dada0c2fc83c8cd660b47fb4bd786b84ca45bb6d9e2f2bd8c5ade16b230206
-
SSDEEP
12288:ZsNFYUUmJr6adlY8pFeAPneIaEzfpaDjBMzE7EU5snf4mskwCI3gBx97n6mhEA8e:ZsNfvlPDe4neIaErpQio7EU5snfKkwPo
Malware Config
Signatures
Files
-
3dd154a36d7a74a61c82132c0d4579bd9fe51b5154499082da83bd144c022b8c.exe windows x86
bbf312ed2a92a805e568d99f416d7f12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
ReadFile
MapViewOfFile
GetEnvironmentVariableW
FindClose
WaitForMultipleObjects
GetCommandLineW
LocalSize
EnterCriticalSection
GetCommandLineA
HeapFree
IsBadReadPtr
FindVolumeClose
GetFileTime
GetFileType
FindVolumeClose
ExitThread
GetCurrentDirectoryW
GetFileAttributesA
CloseHandle
GetDriveTypeA
SetFileAttributesW
GetModuleHandleA
GlobalLock
HeapCreate
uxtheme
CloseThemeData
DrawThemeBackground
GetThemeTextMetrics
GetThemeTextExtent
GetThemeColor
GetThemeEnumValue
CloseThemeData
IsThemeActive
GetWindowTheme
DrawThemeEdge
SetWindowTheme
OpenThemeData
GetThemeBool
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE