Static task
static1
Behavioral task
behavioral1
Sample
c03635052181b2ea27b186c98de04f919450e86569eba4958c1012eb4fc03270.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c03635052181b2ea27b186c98de04f919450e86569eba4958c1012eb4fc03270.exe
Resource
win10v2004-20221111-en
General
-
Target
c03635052181b2ea27b186c98de04f919450e86569eba4958c1012eb4fc03270
-
Size
746KB
-
MD5
e16f2ba9ac046b08eef260de1e24c9b6
-
SHA1
5f23bd94c3c80eb59bc98edd7fd22f5068e6cf37
-
SHA256
c03635052181b2ea27b186c98de04f919450e86569eba4958c1012eb4fc03270
-
SHA512
7201fed04e7925dc00912acb3adc633c3b725efad1236f44a8c921966fc20d049781f029d5d252e06530f8cc589eb2b074b3efe63b6433fb7f7d62ca252c7f73
-
SSDEEP
12288:CKfYAmAI8rwsLeTW7wm+wJf/zDgYqVc+Cqr462wV4ufqY+q2x:CKrjI8r9LePmFdF8c+DCY+V
Malware Config
Signatures
Files
-
c03635052181b2ea27b186c98de04f919450e86569eba4958c1012eb4fc03270.exe windows x86
0ca1beb1a4278b656808c5a9d026dd9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
WaitForMultipleObjects
GetCommandLineA
GetModuleHandleA
EnterCriticalSection
SetFileAttributesW
GetModuleFileNameA
CloseHandle
CancelIo
GetCurrentDirectoryW
ExitThread
LocalSize
GetCommandLineW
GetDriveTypeA
HeapFree
FindVolumeClose
FindVolumeClose
lstrlenA
IsBadReadPtr
MapViewOfFile
WriteFile
GetFileTime
HeapCreate
GetFileType
FindClose
uxtheme
GetThemeTextMetrics
IsThemeActive
CloseThemeData
GetThemeColor
SetWindowTheme
GetThemeBool
CloseThemeData
DrawThemeEdge
GetWindowTheme
OpenThemeData
GetThemeTextExtent
GetThemeEnumValue
DrawThemeBackground
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE