Static task
static1
Behavioral task
behavioral1
Sample
bbde6398281d92e129a1e2f257b7ca8367e33a9429902c3493db54f6ec3f03a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbde6398281d92e129a1e2f257b7ca8367e33a9429902c3493db54f6ec3f03a0.exe
Resource
win10v2004-20220812-en
General
-
Target
bbde6398281d92e129a1e2f257b7ca8367e33a9429902c3493db54f6ec3f03a0
-
Size
310KB
-
MD5
62bd1b7d5b81ae77ffb4d5d35dccf130
-
SHA1
dcbfd377bb4dbad783fbc733de7be2a469887707
-
SHA256
bbde6398281d92e129a1e2f257b7ca8367e33a9429902c3493db54f6ec3f03a0
-
SHA512
ef3ce8f80c520f5f589500ec401a96d85f9a9d4b22d8dfed9130996b05ffcd476b1749c61133170156b6a825ae3d8c6025a2470aca537cc526fbb087a53e2ee6
-
SSDEEP
6144:dHLfB2L1REtzJgjsAMIkSA6fjGr2I0AQ2I3dVoTxtySb:5LWzE5OjGz6fqr2/MMdqvySb
Malware Config
Signatures
Files
-
bbde6398281d92e129a1e2f257b7ca8367e33a9429902c3493db54f6ec3f03a0.exe windows x86
5257bdb62007912cd5f4818a074a23da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
HeapDestroy
GetDriveTypeA
FindVolumeClose
LocalLock
GetCurrentProcess
DeleteFileA
HeapFree
GetCurrentThread
lstrlenA
GetPrivateProfileSectionA
LoadLibraryA
GetPrivateProfileIntW
GetStdHandle
VirtualProtectEx
GetFileAttributesA
OpenMutexA
GetStringTypeA
CreateEventW
DeviceIoControl
DeviceIoControl
uxtheme
GetThemeColor
CloseThemeData
GetThemeTextMetrics
OpenThemeData
GetThemeTextExtent
IsThemeActive
SetWindowTheme
DrawThemeEdge
CloseThemeData
DrawThemeBackground
GetWindowTheme
GetThemeSysSize
GetThemeBool
odbccp32
SQLConfigDataSource
SQLInstallODBC
SQLGetAvailableDrivers
SQLInstallDriver
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ