Static task
static1
Behavioral task
behavioral1
Sample
4f9991ab956db8b26cd1696bf512fe74976fec18e67eb607dd89e3026ca31722.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4f9991ab956db8b26cd1696bf512fe74976fec18e67eb607dd89e3026ca31722.exe
Resource
win10v2004-20221111-en
General
-
Target
4f9991ab956db8b26cd1696bf512fe74976fec18e67eb607dd89e3026ca31722
-
Size
746KB
-
MD5
6f704dc86828ec46524b35617790b7a4
-
SHA1
e7013fdda130c6df56b695a378f3479b96e69b0a
-
SHA256
4f9991ab956db8b26cd1696bf512fe74976fec18e67eb607dd89e3026ca31722
-
SHA512
26d76ed7919d656dc4927e1b91c5b53bd71e22aab32912d515afc37acf2c9b02c4ac1b50dda55389fbb2e50c06526ac1a30f72bdae844d0c9a8dad79c2c6890a
-
SSDEEP
12288:aQYONmeRdpu4k5Nbu17l1Rg7sye/ISpVz1Xokz1IZ+/ndgkpFoH9WmXjxxjJrCw7:1YKRdpu40b87lDYsyErVhXjz1IZ+vdpm
Malware Config
Signatures
Files
-
4f9991ab956db8b26cd1696bf512fe74976fec18e67eb607dd89e3026ca31722.exe windows x86
e774247de1f5f4a8d0b17914581ac0c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetDriveTypeA
HeapFree
GetFileTime
GetCommandLineA
EnterCriticalSection
GetEnvironmentVariableW
GetCommandLineW
HeapCreate
SetFileAttributesW
IsBadReadPtr
FindVolumeClose
ReadFile
CloseHandle
lstrlenA
MapViewOfFile
WaitForMultipleObjects
FindVolumeClose
GetFileType
GetCurrentDirectoryW
LocalSize
FindClose
GlobalLock
GetFileAttributesA
ExitThread
uxtheme
GetThemeBool
DrawThemeEdge
DrawThemeBackground
GetThemeColor
GetThemeEnumValue
IsThemeActive
GetThemeTextExtent
GetWindowTheme
OpenThemeData
CloseThemeData
CloseThemeData
GetThemeTextMetrics
SetWindowTheme
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE