Static task
static1
Behavioral task
behavioral1
Sample
6e97d0608b4e242fd9b1e01864cc4c13281ad8c73da08f8c484aa8168df61330.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6e97d0608b4e242fd9b1e01864cc4c13281ad8c73da08f8c484aa8168df61330.exe
Resource
win10v2004-20220901-en
General
-
Target
6e97d0608b4e242fd9b1e01864cc4c13281ad8c73da08f8c484aa8168df61330
-
Size
756KB
-
MD5
b37e77b7514edc556cb6d919be52a486
-
SHA1
14aa25ae929ad09aff82ea38b0ccfb0c35714430
-
SHA256
6e97d0608b4e242fd9b1e01864cc4c13281ad8c73da08f8c484aa8168df61330
-
SHA512
024779f3c195af8650111082727eb47c4518c89c345b708ef6932f438c52e71d2029e0fa8f238063c6cbb89eb0073db5a0e2d58fedb7730bda9d7d6a672da431
-
SSDEEP
12288:k+CEsmPKK22xktQ/zduRkuamirnXCHyGBBVZOvnq5jjUj33b0s9jalpKL0FCmtk:k+CUhnxe63lrXC33eC5tjKYd6
Malware Config
Signatures
Files
-
6e97d0608b4e242fd9b1e01864cc4c13281ad8c73da08f8c484aa8168df61330.exe windows x86
fcb031769611ea7a5d9c8b6e15bff494
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
HeapFree
GetFileAttributesA
ExitThread
CreateSemaphoreA
GetCurrentDirectoryW
FindVolumeClose
GetTickCount
HeapCreate
CloseHandle
WaitForMultipleObjects
VirtualQuery
CancelIo
FindVolumeClose
FindClose
GetFileTime
WriteFile
GetModuleFileNameA
LocalSize
GetFileType
GetDriveTypeA
GetModuleHandleA
lstrlenA
GetCommandLineA
CreateDirectoryA
uxtheme
GetThemeEnumValue
DrawThemeBackground
IsThemeActive
OpenThemeData
CloseThemeData
GetThemeBool
GetThemeTextMetrics
GetThemeTextExtent
GetWindowTheme
GetThemeColor
CloseThemeData
DrawThemeEdge
SetWindowTheme
fltlib
FilterClose
FilterClose
FilterClose
FilterClose
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE