Static task
static1
Behavioral task
behavioral1
Sample
3bfaf47a043c05d51988e821cd9b2dbd3570e0f941505d7a56e63e0907b56207.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3bfaf47a043c05d51988e821cd9b2dbd3570e0f941505d7a56e63e0907b56207.exe
Resource
win10v2004-20221111-en
General
-
Target
3bfaf47a043c05d51988e821cd9b2dbd3570e0f941505d7a56e63e0907b56207
-
Size
425KB
-
MD5
9a676b8ff1b3d54e98bc0382aae97660
-
SHA1
1b6923d6d0f4990f1a599d00a1891fb8d8d322a3
-
SHA256
3bfaf47a043c05d51988e821cd9b2dbd3570e0f941505d7a56e63e0907b56207
-
SHA512
83edf2cccadb7403afa170dc01df9a76fced2fd0ee8e8960938a9e0d45fd7b070071aab306b25eed2ade21d905d73209d691464cb9daf395bb706729238ac7d7
-
SSDEEP
12288:AxSK6ql5hJhp7WZ58+8IdDxNqb/1w/H4bgx1:A4KJzKZW+zp7qb/C/H11
Malware Config
Signatures
Files
-
3bfaf47a043c05d51988e821cd9b2dbd3570e0f941505d7a56e63e0907b56207.exe windows x86
8f565077f168bd6a7766dc2ab841cee4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
ExitThread
FindClose
GetFileTime
WriteFile
MapViewOfFile
FindVolumeClose
GetCommandLineA
lstrlenA
SetFileAttributesW
EnterCriticalSection
GetModuleHandleA
IsBadReadPtr
GetDriveTypeA
HeapFree
GetModuleFileNameA
WaitForMultipleObjects
HeapCreate
LocalSize
GetFileType
GetCommandLineW
CancelIo
GetFileAttributesA
FindVolumeClose
CloseHandle
uxtheme
CloseThemeData
DrawThemeEdge
GetThemeTextMetrics
SetWindowTheme
IsThemeActive
OpenThemeData
CloseThemeData
GetWindowTheme
GetThemeTextExtent
GetThemeColor
GetThemeBool
GetThemeEnumValue
DrawThemeBackground
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE