Static task
static1
Behavioral task
behavioral1
Sample
493fa5be8633c4965e930bf951af2acea32d443859bf3a151ccbc5197cd5a6b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
493fa5be8633c4965e930bf951af2acea32d443859bf3a151ccbc5197cd5a6b4.exe
Resource
win10v2004-20221111-en
General
-
Target
493fa5be8633c4965e930bf951af2acea32d443859bf3a151ccbc5197cd5a6b4
-
Size
746KB
-
MD5
7440b34bcec9dea32a1ed46c9d555265
-
SHA1
eb5ba5c6e488c9583932e499e2091148cdc38393
-
SHA256
493fa5be8633c4965e930bf951af2acea32d443859bf3a151ccbc5197cd5a6b4
-
SHA512
e4c53b6672cf6dbdcaa7407a7a783bb2651fade02300aaffc9907a762f7130a4ae726e44844f63d2b9288f81fae2dec7f9ca8eb91e9dfcb4ea91aa88a446ed41
-
SSDEEP
12288:K6e7f/hbye2tbpmEB70VpFz6UvIVXuLkn3aJqzTuN4qPTJeEDZn4XAFEAAx5j2X:K6neaNiVpRdvIVeLGaqGsE9OAF3AxwX
Malware Config
Signatures
Files
-
493fa5be8633c4965e930bf951af2acea32d443859bf3a151ccbc5197cd5a6b4.exe windows x86
847e1d6942238bea04c653741d7bd181
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
lstrlenA
HeapCreate
GetCommandLineW
GlobalLock
GetFileTime
EnterCriticalSection
CloseHandle
IsBadReadPtr
SetFileAttributesW
GetModuleHandleA
GlobalSize
GetEnvironmentVariableW
HeapFree
GetCommandLineA
GetCurrentDirectoryW
MapViewOfFile
ReadFile
SetLastError
WaitForMultipleObjects
SetLastError
GetDriveTypeA
GetFileType
ExitThread
FindClose
uxtheme
CloseThemeData
GetThemeBool
GetThemeTextMetrics
CloseThemeData
IsThemeActive
GetThemeColor
DrawThemeBackground
OpenThemeData
GetWindowTheme
GetThemeEnumValue
SetWindowTheme
GetThemeTextExtent
DrawThemeEdge
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE