Static task
static1
Behavioral task
behavioral1
Sample
2de21bd169a1d1ed8662e1675c8e9b46225f8f153c9397d7ba729ad0bc5095e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2de21bd169a1d1ed8662e1675c8e9b46225f8f153c9397d7ba729ad0bc5095e5.exe
Resource
win10v2004-20220901-en
General
-
Target
2de21bd169a1d1ed8662e1675c8e9b46225f8f153c9397d7ba729ad0bc5095e5
-
Size
741KB
-
MD5
653cab989a827522295514a38443a3d4
-
SHA1
14288adebb4c601addb52265fea94aaea14002df
-
SHA256
2de21bd169a1d1ed8662e1675c8e9b46225f8f153c9397d7ba729ad0bc5095e5
-
SHA512
5da7199b4f63c28717a76b87367a59d4863115ac7e1a6d62ae59cfc4925d4a169b9ea48ff2e75a04b226e9b0d13186031a57962baf6a67d121f7e34f44e6e048
-
SSDEEP
12288:LECVVI20GoJ+PEVAiCn6pDQEtrT3K7ak6sDCTNVSbYgV8whqPhjuPAelThhAHZSc:RvI20G8+c3DpUzk4iVUtr8F0AOThS55
Malware Config
Signatures
Files
-
2de21bd169a1d1ed8662e1675c8e9b46225f8f153c9397d7ba729ad0bc5095e5.exe windows x86
a79a785d358411c80948d85c15ea6bb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
GetDriveTypeA
lstrlenA
ExitThread
WaitForMultipleObjects
GetModuleHandleA
LocalSize
HeapCreate
GetFileTime
FindVolumeClose
CloseHandle
IsBadReadPtr
EnterCriticalSection
GetFileAttributesA
FindClose
GetFileType
WriteFile
GetCurrentDirectoryW
GetTickCount
HeapFree
GetModuleFileNameA
FindVolumeClose
GetCommandLineA
CreateDirectoryA
CreateSemaphoreA
uxtheme
GetWindowTheme
CloseThemeData
GetThemeTextExtent
OpenThemeData
DrawThemeBackground
SetWindowTheme
GetThemeColor
CloseThemeData
IsThemeActive
DrawThemeEdge
GetThemeBool
GetThemeEnumValue
GetThemeTextMetrics
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE