Static task
static1
Behavioral task
behavioral1
Sample
e11a0e020da9180f7dca0e2bc578d59f8044a39f2839d51073a738870e74afd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e11a0e020da9180f7dca0e2bc578d59f8044a39f2839d51073a738870e74afd5.exe
Resource
win10v2004-20220812-en
General
-
Target
e11a0e020da9180f7dca0e2bc578d59f8044a39f2839d51073a738870e74afd5
-
Size
748KB
-
MD5
ca4237cbc9b39139215d3c7b766b44c1
-
SHA1
6ef269bb3d96f1a808f9a1bc2fbfc91141eabc76
-
SHA256
e11a0e020da9180f7dca0e2bc578d59f8044a39f2839d51073a738870e74afd5
-
SHA512
f1b8942451e50f4110173ff5c019f5fb1583ec73e81f9f68e0dd791c53a517e0d80627fe55897181704439300af709e38eba576aa782f0a9f51a761606311989
-
SSDEEP
12288:5OyIyBU9KwlhNso8f0xsFf4apYE954IFwwi3DeeeDYejgg/j4QIjxpKh0Y2:MyIyRwl/txsFwPE9bFwD3an/jr4QIjLZ
Malware Config
Signatures
Files
-
e11a0e020da9180f7dca0e2bc578d59f8044a39f2839d51073a738870e74afd5.exe windows x86
0457fb981d03a0ae6296b3e917fbd500
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetDriveTypeA
CancelIo
lstrlenA
GetCommandLineA
IsBadReadPtr
FindClose
CloseHandle
GetCurrentDirectoryW
CreateDirectoryA
WaitForMultipleObjects
HeapFree
ExitThread
GetFileType
FindVolumeClose
GetModuleHandleA
GetCurrentThreadId
FindVolumeClose
CreateSemaphoreA
HeapCreate
GetFileTime
GetModuleFileNameA
GetFileAttributesA
LocalSize
VirtualQuery
uxtheme
IsThemeActive
SetWindowTheme
GetThemeTextExtent
GetThemeColor
DrawThemeEdge
GetWindowTheme
CloseThemeData
DrawThemeBackground
OpenThemeData
GetThemeEnumValue
CloseThemeData
GetThemeBool
GetThemeTextMetrics
fmifs
Extend
Extend
Extend
Extend
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE