Static task
static1
Behavioral task
behavioral1
Sample
a2f6631119fc950b4399ca1e5a9fef1cc1bd815f0596f0932f737dc8b450a70d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2f6631119fc950b4399ca1e5a9fef1cc1bd815f0596f0932f737dc8b450a70d.exe
Resource
win10v2004-20221111-en
General
-
Target
a2f6631119fc950b4399ca1e5a9fef1cc1bd815f0596f0932f737dc8b450a70d
-
Size
746KB
-
MD5
6de9be6a0d41efe6abf26be20dae6d88
-
SHA1
e0fe5d8b5b9a50878ebfde269c3c2f0a55e2ea3f
-
SHA256
a2f6631119fc950b4399ca1e5a9fef1cc1bd815f0596f0932f737dc8b450a70d
-
SHA512
1eca7331cc6f7a6fc42599029277dc4da3ab1980887ef253c15e1c0ceb02b082a1c4b8731c637e7300c9df8effea6637df39ec47743825e7f3a015061a39f188
-
SSDEEP
12288:O0X7sR6Amu9H78KJ7NWHEFWm55jg+hxeXGnoN1DnU+cu2og9vRmi/RaYMiEndI9N:O0wJ788wkFWmI+hxeXGnoXneu299p5/5
Malware Config
Signatures
Files
-
a2f6631119fc950b4399ca1e5a9fef1cc1bd815f0596f0932f737dc8b450a70d.exe windows x86
132b26d843fb9c7dd40873ef4391b9a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetFileType
WaitForSingleObject
GetDriveTypeA
ExitProcess
GetFileAttributesA
GetCommandLineA
LocalSize
ReadFile
SuspendThread
EnterCriticalSection
GetCommandLineW
GetCurrentDirectoryW
SetLastError
IsBadReadPtr
GetModuleHandleA
CloseHandle
Sleep
GetEnvironmentVariableW
SetFileAttributesW
GetFileTime
GlobalLock
HeapCreate
MapViewOfFile
SetLastError
uxtheme
CloseThemeData
GetWindowTheme
SetWindowTheme
OpenThemeData
IsThemeActive
GetThemeTextExtent
DrawThemeBackground
GetThemeColor
GetThemeTextMetrics
CloseThemeData
DrawThemeEdge
GetThemeEnumValue
GetThemeBool
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE