Static task
static1
Behavioral task
behavioral1
Sample
541a8a27aacda350355d5cc2eb62c59c4e55d2ad6c2366fe4e2d8f4b83a0cf3f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
541a8a27aacda350355d5cc2eb62c59c4e55d2ad6c2366fe4e2d8f4b83a0cf3f.exe
Resource
win10v2004-20221111-en
General
-
Target
541a8a27aacda350355d5cc2eb62c59c4e55d2ad6c2366fe4e2d8f4b83a0cf3f
-
Size
747KB
-
MD5
ef93a0703b67da0b06517f553ae84968
-
SHA1
711e73a73f6480fbfef7ac86490331dcb7a37f64
-
SHA256
541a8a27aacda350355d5cc2eb62c59c4e55d2ad6c2366fe4e2d8f4b83a0cf3f
-
SHA512
acd707394971580920028f426e9c88b3b54f979b751c471f5cb108dc7c9573f483ec8ec12e40f6264b86a5dc0e5924e44e9400aae55ee8a6b4b066dc7838c3c1
-
SSDEEP
12288:5lrgYebjes30wBEoe6x5ivjo6d7QbxsHFDXPWU5z8CaBWL1KoWRVOJMxPZ:5lrgYebjkKne6xIo6d7QoDPzd8vCWRs+
Malware Config
Signatures
Files
-
541a8a27aacda350355d5cc2eb62c59c4e55d2ad6c2366fe4e2d8f4b83a0cf3f.exe windows x86
7d600bf1aabb60238dae6f65969a5b2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
ExitThread
FindVolumeClose
CancelIo
GetFileTime
GetCommandLineA
HeapCreate
FindClose
WriteFile
LocalSize
GetModuleFileNameA
EnterCriticalSection
CloseHandle
GetFileType
GetDriveTypeA
IsBadReadPtr
CreateSemaphoreA
GetCurrentDirectoryW
FindVolumeClose
CreateDirectoryA
WaitForMultipleObjects
HeapFree
lstrlenA
GetModuleHandleA
GetTickCount
uxtheme
GetThemeBool
GetThemeTextMetrics
IsThemeActive
SetWindowTheme
CloseThemeData
DrawThemeEdge
DrawThemeBackground
GetThemeColor
CloseThemeData
GetThemeEnumValue
GetThemeTextExtent
GetWindowTheme
OpenThemeData
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE