Static task
static1
Behavioral task
behavioral1
Sample
9646bb3bf1270f981118898110b8e7eed425c247382f2d03d511ccc624051806.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9646bb3bf1270f981118898110b8e7eed425c247382f2d03d511ccc624051806.exe
Resource
win10v2004-20221111-en
General
-
Target
9646bb3bf1270f981118898110b8e7eed425c247382f2d03d511ccc624051806
-
Size
746KB
-
MD5
d68fae059861e189b78d67ef0e31d7a3
-
SHA1
3584e2ae89a0fdb5bad6de90d236285a05a259d4
-
SHA256
9646bb3bf1270f981118898110b8e7eed425c247382f2d03d511ccc624051806
-
SHA512
4753c9f2bf56204b37d1a6c89fb5bc017e321bbb80491efc3f50155d6c543e550a67dcfa94a6737b304ba6eb5d06d9ad6321c4cb522cc0f91e08d0dc903cf668
-
SSDEEP
12288:TI+zW5OQyj7C79+RvkV09lTa1mlEEn4dU6E8AXA+Jtsiv1bw8eSREVHV54QoL:TNzW5R4+2h9lTmMn4d3E8AQURlw2sA
Malware Config
Signatures
Files
-
9646bb3bf1270f981118898110b8e7eed425c247382f2d03d511ccc624051806.exe windows x86
cfa7cb37ddd6ea54297f01e4256d1614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
EnterCriticalSection
HeapCreate
GetEnvironmentVariableW
CloseHandle
GetFileAttributesA
HeapFree
GetCurrentDirectoryW
GetDriveTypeA
LocalSize
WaitForMultipleObjects
ReadFile
MapViewOfFile
ExitThread
GetModuleHandleA
FindClose
FindVolumeClose
GetFileType
lstrlenA
GetFileTime
GlobalLock
FindVolumeClose
GetCommandLineW
IsBadReadPtr
GetCommandLineA
uxtheme
DrawThemeBackground
GetThemeColor
SetWindowTheme
GetThemeEnumValue
CloseThemeData
GetThemeTextMetrics
GetWindowTheme
DrawThemeEdge
IsThemeActive
OpenThemeData
GetThemeTextExtent
CloseThemeData
GetThemeBool
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE