Static task
static1
Behavioral task
behavioral1
Sample
eff7fee9e8fb70bc0858b1368b603196e03d6123ef648b6748efa5964fff18eb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eff7fee9e8fb70bc0858b1368b603196e03d6123ef648b6748efa5964fff18eb.exe
Resource
win10v2004-20221111-en
General
-
Target
eff7fee9e8fb70bc0858b1368b603196e03d6123ef648b6748efa5964fff18eb
-
Size
61KB
-
MD5
9385f22b3ad2d48bcb0a454c28392590
-
SHA1
3b544cb527241c0c10ad5f191642e199b03fac35
-
SHA256
eff7fee9e8fb70bc0858b1368b603196e03d6123ef648b6748efa5964fff18eb
-
SHA512
4eaef4485a294d1ea3808597e6d8f1bca29b93d142dbbdccacefbd351ebffc873c0167cdac81fbabd0c91f9f259cd62b2a7cc7280b809ecf962cb1d93b171db9
-
SSDEEP
1536:EiAoiwKMDFwHmWd/+4vW2/dCKCXc4bkI:DMEwHmqW4vW2/oJn
Malware Config
Signatures
Files
-
eff7fee9e8fb70bc0858b1368b603196e03d6123ef648b6748efa5964fff18eb.exe windows x86
9016b86d924ebf0874ca8cf0eb516583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapFree
CloseHandle
WaitForMultipleObjects
FindVolumeClose
lstrlenA
HeapCreate
SetFileAttributesW
ExitThread
GetFileAttributesA
FindVolumeClose
GetDriveTypeA
GetCommandLineA
ReadFile
FindClose
LocalSize
EnterCriticalSection
GetCommandLineW
GetFileTime
GetCurrentDirectoryW
GetFileType
MapViewOfFile
GlobalLock
GetEnvironmentVariableW
IsBadReadPtr
uxtheme
DrawThemeBackground
CloseThemeData
GetThemeColor
GetThemeEnumValue
GetThemeBool
SetWindowTheme
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
IsThemeActive
OpenThemeData
GetWindowTheme
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zihbjtl Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE