Static task
static1
Behavioral task
behavioral1
Sample
b4add70bb83de6328ed76e1aeecb569def62a7ffcb83fc7488ab16368aa9df62.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4add70bb83de6328ed76e1aeecb569def62a7ffcb83fc7488ab16368aa9df62.exe
Resource
win10v2004-20220901-en
General
-
Target
b4add70bb83de6328ed76e1aeecb569def62a7ffcb83fc7488ab16368aa9df62
-
Size
745KB
-
MD5
6574e30519385ab3c0f1f536d1732e10
-
SHA1
cebb9cf9cdc84953012d0a963bc752cd814d396c
-
SHA256
b4add70bb83de6328ed76e1aeecb569def62a7ffcb83fc7488ab16368aa9df62
-
SHA512
57209b589b8a701ef76d95d50896c7556663635509d37c5fcac035cd8090e8f6c4a3b8cb15b7200e65926e0131bf657d8dfb445f57df9ea82d69ff32a240f427
-
SSDEEP
12288:jw4uLYUDQc9lNxV2WcGqeMDnj0lV+lR6xjGOvkj0DMkmyZXq63rI6o5iRmjurrsb:jw4uhDQc9ld2WpqnMkOGW4Xl6PRmj
Malware Config
Signatures
Files
-
b4add70bb83de6328ed76e1aeecb569def62a7ffcb83fc7488ab16368aa9df62.exe windows x86
e94d62409668f8cdefd58276837a80ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetCurrentDirectoryW
GetFileType
GetCommandLineA
EnterCriticalSection
CloseHandle
GetDriveTypeA
GetModuleHandleA
SuspendThread
LocalSize
IsBadReadPtr
SetLastError
MapViewOfFile
ExitProcess
GetFileTime
HeapCreate
GetFileAttributesA
WaitForSingleObject
GetCommandLineW
SetFileAttributesW
Sleep
GetEnvironmentVariableW
HeapFree
SetLastError
GlobalLock
uxtheme
DrawThemeBackground
CloseThemeData
SetWindowTheme
GetThemeTextMetrics
GetThemeColor
GetThemeEnumValue
IsThemeActive
CloseThemeData
GetThemeTextExtent
DrawThemeEdge
GetThemeBool
GetWindowTheme
OpenThemeData
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE