Static task
static1
Behavioral task
behavioral1
Sample
ce4ffaeea4efcfb8e4994f031015cc2ef2e97d2c4168e9b55a3986282e401087.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce4ffaeea4efcfb8e4994f031015cc2ef2e97d2c4168e9b55a3986282e401087.exe
Resource
win10v2004-20221111-en
General
-
Target
ce4ffaeea4efcfb8e4994f031015cc2ef2e97d2c4168e9b55a3986282e401087
-
Size
745KB
-
MD5
705624a730cf9373197735333ce4a15e
-
SHA1
546ac728a6f1b75147df48abe20d444cf44a804a
-
SHA256
ce4ffaeea4efcfb8e4994f031015cc2ef2e97d2c4168e9b55a3986282e401087
-
SHA512
e08978ddf0871d5d37382431962facc28328b91c2a9ae242500a3e6d443ec51fda662bbe09db7e6fc9f7d5fe2f4695ac6e7f873e5e7227d494e2b5b20c7cebb0
-
SSDEEP
12288:5B9ExKf9fdJErqVaxmbpvRgW9qXY9neldXW4GhBeqti229Ph2OxL:57EgYJmbpFqJlIpBeLJhx
Malware Config
Signatures
Files
-
ce4ffaeea4efcfb8e4994f031015cc2ef2e97d2c4168e9b55a3986282e401087.exe windows x86
8f352badf62b923938a35bff4ccb5689
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
MapViewOfFile
GetCurrentDirectoryW
HeapCreate
GetCommandLineA
SetLastError
GetModuleHandleA
ReadFile
HeapFree
GetFileType
LocalSize
GetFileAttributesA
GetEnvironmentVariableW
IsBadReadPtr
EnterCriticalSection
ExitProcess
SetLastError
GetCommandLineW
WaitForSingleObject
Sleep
GetDriveTypeA
SetFileAttributesW
GetFileTime
CloseHandle
SuspendThread
uxtheme
GetWindowTheme
CloseThemeData
CloseThemeData
DrawThemeBackground
OpenThemeData
IsThemeActive
DrawThemeEdge
GetThemeTextExtent
GetThemeTextMetrics
GetThemeEnumValue
SetWindowTheme
GetThemeColor
GetThemeBool
deskmon
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE