Static task
static1
Behavioral task
behavioral1
Sample
e42273096fdf9a2fe3f19911ad246c726b238f89b3f7a11ba87586a12440910b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e42273096fdf9a2fe3f19911ad246c726b238f89b3f7a11ba87586a12440910b.exe
Resource
win10v2004-20221111-en
General
-
Target
e42273096fdf9a2fe3f19911ad246c726b238f89b3f7a11ba87586a12440910b
-
Size
749KB
-
MD5
199d3d3d28764450aa003d962ea103c3
-
SHA1
84d8313d7d2420055123521e2c8d026e65654c38
-
SHA256
e42273096fdf9a2fe3f19911ad246c726b238f89b3f7a11ba87586a12440910b
-
SHA512
91754cfa85d9807d7a2a51782dadeed8709e40f8be5bda521d50222c4c7053a9b4159c0fc03d9fb17af12440583e8e82a9252164d6be5a0d262c772699d5b7f4
-
SSDEEP
12288:ZRYB8nRXxsZNmPKvRobx6njqmhbIPvYGiLGvNQSGdk1jTj862edcwmNJXLH2ik7d:ZRYBGimiHemlCYGiLsQSGdk5TH2edc9m
Malware Config
Signatures
Files
-
e42273096fdf9a2fe3f19911ad246c726b238f89b3f7a11ba87586a12440910b.exe windows x86
36c6a3ddcd0bf78f3e8c469ce6f9480f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
CreateEventW
RemoveDirectoryA
HeapFree
WriteFile
GetFileType
RemoveDirectoryA
ReleaseMutex
VirtualProtectEx
WriteConsoleW
CreateFileMappingW
DeleteFileA
lstrlenA
CreateMailslotW
GetLastError
FindClose
FindClose
GetCommandLineA
SetEvent
OpenEventA
GetModuleHandleA
Sleep
CreateDirectoryW
SetLocalTime
ResetEvent
uxtheme
GetThemeSysSize
GetThemeTextExtent
DrawThemeEdge
OpenThemeData
IsThemeActive
CloseThemeData
DrawThemeBackground
GetWindowTheme
GetThemeColor
CloseThemeData
GetThemeBool
SetWindowTheme
GetThemeTextMetrics
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ