Static task
static1
Behavioral task
behavioral1
Sample
c0d27f089983830fd6665598c42aef0906665055109828c51fc254ccc4fb9fb5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0d27f089983830fd6665598c42aef0906665055109828c51fc254ccc4fb9fb5.exe
Resource
win10v2004-20220812-en
General
-
Target
c0d27f089983830fd6665598c42aef0906665055109828c51fc254ccc4fb9fb5
-
Size
747KB
-
MD5
d17116ad893896b42c2509a07a6e06db
-
SHA1
440bceb01bf179c12f9a9b3f1365ecf2062f5f2f
-
SHA256
c0d27f089983830fd6665598c42aef0906665055109828c51fc254ccc4fb9fb5
-
SHA512
45dd1acbe45d31a2ae595d7d09dbe390efeca080cca9de2546a9fbbd9ce85104b2747315073056e5287497677455e2072f2c6cc202b56f727e9575ca0dbe442e
-
SSDEEP
12288:vQb1ACP+ZkPCjF/Vc61Z6et+I0U/goimULt5s5Lv8cN27MJwpFCrwGlbV4:vkACP+gCZC61Iet+t5pppFCrwWbV4
Malware Config
Signatures
Files
-
c0d27f089983830fd6665598c42aef0906665055109828c51fc254ccc4fb9fb5.exe windows x86
938457deb02b953e1dd5dd6362cbdedb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
IsBadReadPtr
GetModuleHandleA
HeapCreate
CreateSemaphoreA
GetFileTime
lstrlenA
GetFileType
GetDriveTypeA
LocalSize
GetCurrentDirectoryW
GetCurrentThreadId
FindClose
HeapFree
WriteFile
ExitThread
CancelIo
FindVolumeClose
GetModuleFileNameA
CloseHandle
VirtualQuery
WaitForMultipleObjects
CreateDirectoryA
GetCommandLineA
FindVolumeClose
uxtheme
SetWindowTheme
GetThemeColor
CloseThemeData
GetThemeSysSize
DrawThemeBackground
DrawThemeEdge
CloseThemeData
GetThemeBool
GetWindowTheme
IsThemeActive
OpenThemeData
GetThemeTextMetrics
GetThemeTextExtent
fmifs
Extend
Extend
Extend
Extend
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE