Static task
static1
Behavioral task
behavioral1
Sample
58134bac1bf68da0bd97c66a064dd185c3666a68b2a771335980406293d5711b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
58134bac1bf68da0bd97c66a064dd185c3666a68b2a771335980406293d5711b.exe
Resource
win10v2004-20220901-en
General
-
Target
58134bac1bf68da0bd97c66a064dd185c3666a68b2a771335980406293d5711b
-
Size
198KB
-
MD5
706f76aeac913ccbbc3a560c2c09df02
-
SHA1
20689362753d0829b8432066634097e3cbd3105c
-
SHA256
58134bac1bf68da0bd97c66a064dd185c3666a68b2a771335980406293d5711b
-
SHA512
4788b341744b757e7e1234d84ac12b8497e0a7f6c96bd0a18bbbe1d1e6a27e90d20b7a98945e5b7660521af39076b87ce55efac6499a0fc83f7376d5d661cc6f
-
SSDEEP
6144:WadOfCPMQtuc4W90b569wXi4Fjf8daW2/3:WaQ6P1oWm96udFjLWk
Malware Config
Signatures
Files
-
58134bac1bf68da0bd97c66a064dd185c3666a68b2a771335980406293d5711b.exe windows x86
39b2184d08b6319f2127850b8c6d0aae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
WaitForSingleObject
SetLastError
SetFileAttributesW
GetCurrentDirectoryW
ExitProcess
DeleteFileW
VirtualAlloc
IsBadReadPtr
Sleep
RemoveDirectoryA
GetFileAttributesA
FindAtomW
GetEnvironmentVariableW
CreateFileA
SetLastError
GetModuleHandleA
GetCommandLineW
EnterCriticalSection
GetVersion
HeapSize
SuspendThread
GetFileType
CloseHandle
GetFileTime
uxtheme
DrawThemeBackground
GetThemeEnumValue
GetThemeBool
GetThemeTextMetrics
DrawThemeEdge
GetThemeTextExtent
IsThemeActive
SetWindowTheme
GetWindowTheme
CloseThemeData
GetThemeColor
CloseThemeData
OpenThemeData
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ