Static task
static1
Behavioral task
behavioral1
Sample
c2a3fa03c2f826c77b52974e7180756882618ddf3fa56ff86a99d460b1d63990.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2a3fa03c2f826c77b52974e7180756882618ddf3fa56ff86a99d460b1d63990.exe
Resource
win10v2004-20220812-en
General
-
Target
c2a3fa03c2f826c77b52974e7180756882618ddf3fa56ff86a99d460b1d63990
-
Size
746KB
-
MD5
9a0937f7ec5dbe0163b5e246e08e6317
-
SHA1
45cf18fc3565fee018465dc9d4600fed55ec2851
-
SHA256
c2a3fa03c2f826c77b52974e7180756882618ddf3fa56ff86a99d460b1d63990
-
SHA512
857de24029111dc23a6f5fae9c0a2bc13110868b43ff95afd2208056823cb452de003a1df5cf158d4a5231a9d2b8b83769c9cbc37148e8930774dce07d49cbb9
-
SSDEEP
12288:09Pwp+YsrxwfWMb6345K7KPjrQW9xVNz//IZz1MAsku44kkSttyQ:0O1srxw8uPjr9xr/QZpOX5UtyQ
Malware Config
Signatures
Files
-
c2a3fa03c2f826c77b52974e7180756882618ddf3fa56ff86a99d460b1d63990.exe windows x86
cca7b1e831414cf292e9b8d6dcc593fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
CancelIo
GetDriveTypeA
FindClose
ExitThread
GetFileType
lstrlenA
SetFileAttributesW
HeapCreate
GetFileTime
HeapFree
MapViewOfFile
FindVolumeClose
WaitForMultipleObjects
LocalSize
GetModuleHandleA
FindVolumeClose
GetCommandLineA
CloseHandle
EnterCriticalSection
GetModuleFileNameA
GetFileAttributesA
WriteFile
GetCurrentDirectoryW
IsBadReadPtr
uxtheme
GetThemeTextExtent
GetThemeColor
CloseThemeData
CloseThemeData
DrawThemeEdge
GetWindowTheme
DrawThemeBackground
GetThemeTextMetrics
SetWindowTheme
GetThemeEnumValue
GetThemeBool
IsThemeActive
OpenThemeData
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE