Static task
static1
Behavioral task
behavioral1
Sample
c3a07a2233ebe98a5d067d4ed75533067522cc2f2e7ddf181ec5e2e5c6e93e36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3a07a2233ebe98a5d067d4ed75533067522cc2f2e7ddf181ec5e2e5c6e93e36.exe
Resource
win10v2004-20221111-en
General
-
Target
c3a07a2233ebe98a5d067d4ed75533067522cc2f2e7ddf181ec5e2e5c6e93e36
-
Size
75KB
-
MD5
f4ab744cc37fb68e12e86c03c0e661f4
-
SHA1
647fd22267d519d22fdd4c6accf6e60dafc9f661
-
SHA256
c3a07a2233ebe98a5d067d4ed75533067522cc2f2e7ddf181ec5e2e5c6e93e36
-
SHA512
66bc2658e37ee85ecc759306aa4ad39f8a9edde4510b6788752a487494b1a7799efa72b6811df9f06712705505b5db23187da3c054671a92ef819b84495dbdb4
-
SSDEEP
1536:PkX5TYnbS+UpKB7SaGZWVV15zvF+3y2Bsa2i/bEw3BWF17xwhHKnLB8NhZg/OYyQ:tBzjYL30F11whqnNz/OB/qr
Malware Config
Signatures
Files
-
c3a07a2233ebe98a5d067d4ed75533067522cc2f2e7ddf181ec5e2e5c6e93e36.exe windows x86
3376d5f0ab1b04fab9904f4d91772fc6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
Sleep
IsBadReadPtr
SetFileAttributesW
GetDriveTypeA
ReadFile
SuspendThread
SetLastError
HeapFree
WaitForSingleObject
GetCommandLineW
GetEnvironmentVariableW
LocalSize
GetFileAttributesA
CloseHandle
GetCommandLineA
GetCurrentDirectoryW
GetModuleHandleA
GetFileType
EnterCriticalSection
HeapCreate
GlobalLock
ExitProcess
MapViewOfFile
GetFileTime
uxtheme
GetThemeTextMetrics
GetThemeBool
OpenThemeData
SetWindowTheme
DrawThemeEdge
CloseThemeData
GetThemeTextExtent
CloseThemeData
GetThemeColor
IsThemeActive
GetThemeEnumValue
DrawThemeBackground
GetWindowTheme
deskmon
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE