Static task
static1
Behavioral task
behavioral1
Sample
6e7366225e6b0ece3bc9a6fe9c8f1979a0f40b18d1ac6953d3d47ab4fa4f21af.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6e7366225e6b0ece3bc9a6fe9c8f1979a0f40b18d1ac6953d3d47ab4fa4f21af.exe
Resource
win10v2004-20221111-en
General
-
Target
6e7366225e6b0ece3bc9a6fe9c8f1979a0f40b18d1ac6953d3d47ab4fa4f21af
-
Size
748KB
-
MD5
3023d01821ee3163a8c2ea0f168b3f69
-
SHA1
9097e90743131a2da0ef9c62270ddf808e831200
-
SHA256
6e7366225e6b0ece3bc9a6fe9c8f1979a0f40b18d1ac6953d3d47ab4fa4f21af
-
SHA512
d1bf7b46a2586d1439b0ef7b6c3cf2f4a131c348e7e39c87cb0f6f7ca879bfca4197cc5af7f55dabf57dce7c692c9c8d1fbfe59b5b46aab340c7a0f50ff27a1d
-
SSDEEP
12288:COyIyBU9KwlhNso8f0xsFf4apYE954IFwwi3DeeeDYejgg/j4QIjxpKh0Y2:TyIyRwl/txsFwPE9bFwD3an/jr4QIjLZ
Malware Config
Signatures
Files
-
6e7366225e6b0ece3bc9a6fe9c8f1979a0f40b18d1ac6953d3d47ab4fa4f21af.exe windows x86
f45d4cd9d00da6161dca52fb1f15b1ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
VirtualQuery
GetCurrentThreadId
GetCommandLineA
LocalSize
WriteFile
GetModuleHandleA
ExitThread
CloseHandle
HeapFree
HeapCreate
GetDriveTypeA
GetFileTime
CreateSemaphoreA
WaitForMultipleObjects
IsBadReadPtr
lstrlenA
FindVolumeClose
GetFileAttributesA
FindVolumeClose
CreateDirectoryA
CancelIo
GetCurrentDirectoryW
GetFileType
GetModuleFileNameA
uxtheme
DrawThemeBackground
CloseThemeData
DrawThemeEdge
GetThemeColor
OpenThemeData
GetWindowTheme
SetWindowTheme
GetThemeTextMetrics
GetThemeEnumValue
CloseThemeData
GetThemeBool
GetThemeTextExtent
IsThemeActive
fmifs
Extend
Extend
Extend
Extend
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE