Static task
static1
Behavioral task
behavioral1
Sample
e01a06fd76917c0cb1bbe4178c063941d91e14cfa0efc21696ee543032fb5445.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e01a06fd76917c0cb1bbe4178c063941d91e14cfa0efc21696ee543032fb5445.exe
Resource
win10v2004-20221111-en
General
-
Target
e01a06fd76917c0cb1bbe4178c063941d91e14cfa0efc21696ee543032fb5445
-
Size
102KB
-
MD5
3d5b137a9d640d965ed587081940e445
-
SHA1
52f635b99c17e5c4f1bde5afb9a2e096e4945966
-
SHA256
e01a06fd76917c0cb1bbe4178c063941d91e14cfa0efc21696ee543032fb5445
-
SHA512
7c8d9fd47115f8d6c7837cfc5ac23beb4e2f1e924e1a077ab7b436897f2e3181340f8b3fef4407029116ab7609188d98fb8509f09b7aa65077a5fb07d708a45d
-
SSDEEP
1536:914MNtQVu9hBehOs8Dfmu5EBHVJI9EXBQ/qPTR0m1jBH152lwHzE0OL98H:IuQhCDfmu5SDI9cBQ8v5ObXJ8H
Malware Config
Signatures
Files
-
e01a06fd76917c0cb1bbe4178c063941d91e14cfa0efc21696ee543032fb5445.exe windows x86
5a731f386348a029c68c04968b3a2f42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
EnterCriticalSection
FindVolumeClose
ExitThread
GetFileTime
CloseHandle
GetEnvironmentVariableW
GetDriveTypeA
GetCommandLineW
GetFileType
HeapFree
FindVolumeClose
GetModuleHandleA
LocalSize
GetCurrentDirectoryW
ReadFile
HeapCreate
lstrlenA
SetFileAttributesW
FindClose
GetCommandLineA
WaitForMultipleObjects
MapViewOfFile
GlobalLock
GetFileAttributesA
uxtheme
CloseThemeData
GetWindowTheme
CloseThemeData
GetThemeTextMetrics
DrawThemeBackground
DrawThemeEdge
IsThemeActive
SetWindowTheme
GetThemeColor
OpenThemeData
GetThemeEnumValue
GetThemeBool
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yucqldj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE