Static task
static1
Behavioral task
behavioral1
Sample
b4a71db1a0bdc7d4774d97a53dad0fcd2e96e68b93b71bc498cbbfab66c4fda5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4a71db1a0bdc7d4774d97a53dad0fcd2e96e68b93b71bc498cbbfab66c4fda5.exe
Resource
win10v2004-20220812-en
General
-
Target
b4a71db1a0bdc7d4774d97a53dad0fcd2e96e68b93b71bc498cbbfab66c4fda5
-
Size
768KB
-
MD5
8a8c670861f25be91f803c6369c07938
-
SHA1
069deac9a60450522cdfcb41353027965680482e
-
SHA256
b4a71db1a0bdc7d4774d97a53dad0fcd2e96e68b93b71bc498cbbfab66c4fda5
-
SHA512
361987bdc9d6d14e37af00fac88a71b19ae63135df5396ca37d54796b3ff7c94773f02624baf41fbfdbbecaaf70842c5601315c1b90fef15d3d941613ef676e7
-
SSDEEP
12288:4dejuOt/u0cosQvu39GcZuP6aTgJ6f9QarBauEhcosKXYfRpzydZvEiXirA8w4rd:4KfHlvutVaTybGEaosKofRhydZ8iSrAM
Malware Config
Signatures
Files
-
b4a71db1a0bdc7d4774d97a53dad0fcd2e96e68b93b71bc498cbbfab66c4fda5.exe windows x86
759f4efded8db17f2b1078ce20b305f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
RemoveDirectoryW
SetLastError
CreateMutexA
GetStartupInfoA
HeapDestroy
LoadLibraryA
GetFileSize
ExitProcess
OpenEventW
CreateFileA
ReleaseSemaphore
lstrlenA
GetCommandLineW
CreateDirectoryW
MapViewOfFile
SetLastError
GetVersion
DeleteFileA
GetStdHandle
HeapSize
CreatePipe
RemoveDirectoryW
ReleaseMutex
CreateFileMappingW
uxtheme
GetThemeColor
DrawThemeBackground
DrawThemeEdge
GetThemeBool
CloseThemeData
SetWindowTheme
GetWindowTheme
GetThemeTextMetrics
GetThemeSysSize
OpenThemeData
GetThemeTextExtent
IsThemeActive
CloseThemeData
feclient
FeClientInitialize
FeClientInitialize
FeClientInitialize
FeClientInitialize
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE