Static task
static1
Behavioral task
behavioral1
Sample
c9fbc56229816667e10233acebcba68eb1db9128ae2866c7a8f53140b17c9d4b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9fbc56229816667e10233acebcba68eb1db9128ae2866c7a8f53140b17c9d4b.exe
Resource
win10v2004-20220812-en
General
-
Target
c9fbc56229816667e10233acebcba68eb1db9128ae2866c7a8f53140b17c9d4b
-
Size
22KB
-
MD5
49e856a06da32dc0c4a2fd5de734fe49
-
SHA1
2d12cf05aff65ba36b13d3ef37ce637b6ccf2a40
-
SHA256
c9fbc56229816667e10233acebcba68eb1db9128ae2866c7a8f53140b17c9d4b
-
SHA512
2d12058558212ae1251666b9706c3add97f5494acc0ca12830549d38165bd6cfe740f2bba66052e0e00b2ce91e96e3267de73b785619090c38c807e63d9b1c13
-
SSDEEP
192:USPdiWsb96tTiZYOaLwb2dsal+NHNNEDO6PKOAkJOVn8LkTOdKGj1QvXBC+EuH4h:XVl2zY8b25+mC6VNwUKqkC+Em
Malware Config
Signatures
Files
-
c9fbc56229816667e10233acebcba68eb1db9128ae2866c7a8f53140b17c9d4b.exe windows x86
ed5f8a8e05edad1e83ac85db5f1b56b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetCurrentDirectoryW
ExitThread
GetCommandLineA
GetFileTime
IsBadReadPtr
CreateDirectoryA
HeapCreate
FindClose
GetFileAttributesA
CloseHandle
WriteFile
LocalSize
GetTickCount
EnterCriticalSection
CancelIo
FindVolumeClose
lstrlenA
FindVolumeClose
GetModuleFileNameA
GetFileType
CreateSemaphoreA
GetModuleHandleA
WaitForMultipleObjects
HeapFree
uxtheme
CloseThemeData
DrawThemeBackground
SetWindowTheme
DrawThemeEdge
GetThemeTextMetrics
GetThemeBool
IsThemeActive
OpenThemeData
GetThemeColor
CloseThemeData
GetThemeEnumValue
GetThemeTextExtent
GetWindowTheme
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE