Static task
static1
Behavioral task
behavioral1
Sample
e69421d693d1f08cb51998aefbfd413bed3e25ffa88ad1aaa3ccb6b6f1c1199f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e69421d693d1f08cb51998aefbfd413bed3e25ffa88ad1aaa3ccb6b6f1c1199f.exe
Resource
win10v2004-20220812-en
General
-
Target
e69421d693d1f08cb51998aefbfd413bed3e25ffa88ad1aaa3ccb6b6f1c1199f
-
Size
312KB
-
MD5
02d81e57b6a2b7cf3bf0cdd2111051d0
-
SHA1
14abf0fcad598d2783f54014492ac7aed6045128
-
SHA256
e69421d693d1f08cb51998aefbfd413bed3e25ffa88ad1aaa3ccb6b6f1c1199f
-
SHA512
79349e666d6510f38fdcc20cca189f418b2202e101b69be6691e04627605213db423117144aa717a575dbad664e5523b24d1afcb2149ee43d91ac2a6fd2160cf
-
SSDEEP
6144:OwLrnekC68V6ySZ9cXe+icnKYzStDh41vYprqw1DOuP+s2S:OwLref68AC30Yzqh4m1lOHs2S
Malware Config
Signatures
Files
-
e69421d693d1f08cb51998aefbfd413bed3e25ffa88ad1aaa3ccb6b6f1c1199f.exe windows x86
1ea54afa54c84b7fc730bcb1291b57a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetCurrentProcess
GetPrivateProfileSectionA
FindVolumeClose
LocalLock
lstrlenA
CreateEventW
LoadLibraryA
CloseHandle
DeviceIoControl
HeapFree
GetPrivateProfileIntW
GetStringTypeA
OpenMutexA
DeviceIoControl
GetDriveTypeA
GetCurrentThread
GetFileAttributesA
GetStdHandle
VirtualProtectEx
DeleteFileA
uxtheme
IsThemeActive
GetThemeBool
GetWindowTheme
DrawThemeEdge
GetThemeSysSize
CloseThemeData
GetThemeColor
SetWindowTheme
GetThemeTextExtent
DrawThemeBackground
OpenThemeData
CloseThemeData
GetThemeTextMetrics
odbccp32
SQLInstallODBC
SQLInstallDriver
SQLConfigDataSource
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ