Static task
static1
Behavioral task
behavioral1
Sample
dbdf75e0c8d25db6ce60cd62595ee731fe13686573b1a3bc3656078539d04725.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dbdf75e0c8d25db6ce60cd62595ee731fe13686573b1a3bc3656078539d04725.exe
Resource
win10v2004-20220901-en
General
-
Target
dbdf75e0c8d25db6ce60cd62595ee731fe13686573b1a3bc3656078539d04725
-
Size
748KB
-
MD5
29aab823fdcb4c8a8278f288212ff0ac
-
SHA1
58e581e0acecc6717cff87a6d9a90283ccb64eb3
-
SHA256
dbdf75e0c8d25db6ce60cd62595ee731fe13686573b1a3bc3656078539d04725
-
SHA512
cd04f230b2433ad702d1f106b9fafb9b3244faa6e777e7673db1b34fc9fbdde62765a10851fdc6f2cd534e3995ca5dc45337a53f49714d94c543f700fa26d695
-
SSDEEP
12288:yng+Kckth97vOWRJ9zwIhvgBXy1K1S3BbrvqwfpAR1BiS7sxZOyX2PjGDmKYC:dncch90IhvgBXz1Q9vqwBYF74G3Kr
Malware Config
Signatures
Files
-
dbdf75e0c8d25db6ce60cd62595ee731fe13686573b1a3bc3656078539d04725.exe windows x86
548259b3cf7f20086837856ad33f9348
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetTickCount
FindVolumeClose
GetModuleFileNameA
WriteFile
GetFileAttributesA
GetCommandLineA
WaitForMultipleObjects
FindClose
CancelIo
LocalSize
FindVolumeClose
GetFileTime
HeapCreate
CloseHandle
CreateDirectoryA
IsBadReadPtr
GetModuleHandleA
HeapFree
GetCurrentDirectoryW
ExitThread
lstrlenA
EnterCriticalSection
CreateSemaphoreA
GetFileType
uxtheme
GetThemeEnumValue
DrawThemeEdge
CloseThemeData
DrawThemeBackground
GetThemeTextExtent
GetThemeTextMetrics
SetWindowTheme
GetThemeBool
CloseThemeData
OpenThemeData
GetWindowTheme
GetThemeColor
IsThemeActive
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE