Static task
static1
Behavioral task
behavioral1
Sample
a81fe9ff890db3614f5ab1be8495582f52ce51df192bd9a90613c6727b695332.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a81fe9ff890db3614f5ab1be8495582f52ce51df192bd9a90613c6727b695332.exe
Resource
win10v2004-20220812-en
General
-
Target
a81fe9ff890db3614f5ab1be8495582f52ce51df192bd9a90613c6727b695332
-
Size
745KB
-
MD5
fda90dea6348fd6b13e7b521d9f412e9
-
SHA1
18614a887b32347a5d1a594bcb670e9eb16c55ec
-
SHA256
a81fe9ff890db3614f5ab1be8495582f52ce51df192bd9a90613c6727b695332
-
SHA512
e86e0db23a61b9e9a13fae50454516168910c4c1548c9bc748644f097e8a29ed553a0044d98822a8d5e1dc4a9c7158c915dfded7644dc2279f6315a2e3474d02
-
SSDEEP
12288:1w4uLYUDQc9lNxV2WcGqeMDnj0lV+lR6xjGOvkj0DMkmyZXq63rI6o5iRmjurrsb:1w4uhDQc9ld2WpqnMkOGW4Xl6PRmj
Malware Config
Signatures
Files
-
a81fe9ff890db3614f5ab1be8495582f52ce51df192bd9a90613c6727b695332.exe windows x86
26d6519db5762b16eaf886cbfb0c1a57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetFileAttributesA
ExitProcess
SetFileAttributesW
LocalSize
GetFileType
GetCommandLineA
Sleep
HeapCreate
CloseHandle
SetLastError
GetCommandLineW
MapViewOfFile
GetFileTime
GetDriveTypeA
GetModuleHandleA
WaitForSingleObject
IsBadReadPtr
EnterCriticalSection
GetEnvironmentVariableW
SuspendThread
HeapFree
GetCurrentDirectoryW
GlobalLock
ReadFile
uxtheme
GetWindowTheme
GetThemeEnumValue
OpenThemeData
IsThemeActive
CloseThemeData
GetThemeTextMetrics
GetThemeColor
DrawThemeBackground
CloseThemeData
DrawThemeEdge
GetThemeTextExtent
GetThemeBool
SetWindowTheme
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE