Static task
static1
Behavioral task
behavioral1
Sample
b1409b72606621d0ce586446b4b7b2fcdf33b84eaab337a90d9900b579f30a90.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1409b72606621d0ce586446b4b7b2fcdf33b84eaab337a90d9900b579f30a90.exe
Resource
win10v2004-20220812-en
General
-
Target
b1409b72606621d0ce586446b4b7b2fcdf33b84eaab337a90d9900b579f30a90
-
Size
745KB
-
MD5
65795e5b9f620767db9fe06f930ddcda
-
SHA1
149b0132dfb319181e3b8488fca521789303fbd8
-
SHA256
b1409b72606621d0ce586446b4b7b2fcdf33b84eaab337a90d9900b579f30a90
-
SHA512
7b04644d20f65362d03eeabb29b78d6ad6c00fce1e686882080f5a6cdc33ed327a84202eef67892f7de00a2d8cee58feffd102bfa2a83d88e57b40604921219f
-
SSDEEP
12288:NioXurnRyHmfcRZpqESS1+X5noGEjVBJjxCmK8eyjJLdkIFFGYJxha6Z:Niyc+mfMZoSdGEjNxCmVeK5kI39Jra6Z
Malware Config
Signatures
Files
-
b1409b72606621d0ce586446b4b7b2fcdf33b84eaab337a90d9900b579f30a90.exe windows x86
5d8109ae14e06cc3b0e245b244ad82b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CloseHandle
HeapFree
SetFileAttributesW
WaitForSingleObject
HeapCreate
MapViewOfFile
GetCommandLineW
ExitProcess
GetFileType
GetEnvironmentVariableW
ReadFile
GetCurrentDirectoryW
GetCommandLineA
EnterCriticalSection
Sleep
GetFileAttributesA
IsBadReadPtr
GetModuleHandleA
SetLastError
GetDriveTypeA
SuspendThread
GlobalLock
LocalSize
GetFileTime
uxtheme
IsThemeActive
GetThemeTextMetrics
DrawThemeEdge
GetThemeTextExtent
CloseThemeData
OpenThemeData
GetThemeColor
GetThemeEnumValue
CloseThemeData
SetWindowTheme
GetWindowTheme
GetThemeBool
DrawThemeBackground
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE