Static task
static1
Behavioral task
behavioral1
Sample
12e73487ebbb70314e9a24f373c792047717eee56d3546c072c3c571b2d6109e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12e73487ebbb70314e9a24f373c792047717eee56d3546c072c3c571b2d6109e.exe
Resource
win10v2004-20220812-en
General
-
Target
12e73487ebbb70314e9a24f373c792047717eee56d3546c072c3c571b2d6109e
-
Size
311KB
-
MD5
72e1fb2f8913089f5aff1bc861a3b930
-
SHA1
55a950c7f6ed34cf14606f8071496f9a4c6a4402
-
SHA256
12e73487ebbb70314e9a24f373c792047717eee56d3546c072c3c571b2d6109e
-
SHA512
b01be43902e8554fefd38029f43c8866e5940a4b184c62c9760d298f98c3d1b97433ec32df33c772558b9d85a24739ebba29c9f607f1023493bf0b7b34d77e44
-
SSDEEP
6144:H+cLy33v4dfmTiilHwSk4S+kTm1rPWyY4w38CzjmiW3hFc:HlLyACxk4vkTm1reX38Kw7c
Malware Config
Signatures
Files
-
12e73487ebbb70314e9a24f373c792047717eee56d3546c072c3c571b2d6109e.exe windows x86
7b230729634107bfe0fc26d4101b53a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindVolumeClose
CreateEventW
VirtualProtectEx
GetPrivateProfileSectionA
GetStringTypeA
HeapFree
DeleteFileA
GetPrivateProfileIntW
DeviceIoControl
CloseHandle
GetCurrentThread
GetFileAttributesA
HeapDestroy
LocalLock
lstrlenA
LoadLibraryA
GetDriveTypeA
DeviceIoControl
GetCurrentProcess
GetStdHandle
OpenMutexA
uxtheme
GetWindowTheme
DrawThemeEdge
IsThemeActive
DrawThemeBackground
GetThemeTextExtent
GetThemeTextMetrics
GetThemeSysSize
GetThemeBool
CloseThemeData
GetThemeColor
CloseThemeData
OpenThemeData
SetWindowTheme
odbccp32
SQLGetAvailableDrivers
SQLInstallODBC
SQLInstallDriver
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ