Static task
static1
Behavioral task
behavioral1
Sample
a8b6cc5a4b74229588236fdb32888598ce26fd02958f1694aa3a970f9188204e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8b6cc5a4b74229588236fdb32888598ce26fd02958f1694aa3a970f9188204e.exe
Resource
win10v2004-20220812-en
General
-
Target
a8b6cc5a4b74229588236fdb32888598ce26fd02958f1694aa3a970f9188204e
-
Size
128KB
-
MD5
6da53af384fab73d1474b5dbb9b856b0
-
SHA1
863e77f75e8833df078c398518cc4e29eed5283a
-
SHA256
a8b6cc5a4b74229588236fdb32888598ce26fd02958f1694aa3a970f9188204e
-
SHA512
34c12a4832d77d6b9e391cb1ca8c31968c454b89b51b71bcce44cc1291f982f0d8c550d4adc1b360d802ef9f0d0b8c07ee5cf76d5b4374f9b10f9650799ebffc
-
SSDEEP
1536:hsJiV4fDDg4wY/ZAL4EyPhGBy30Oweua48lly0qsDlvREu/EF+Vdv3GHvwPH9:aJj7DWcZ3yy30OwklLqcvREu/svwPd
Malware Config
Signatures
Files
-
a8b6cc5a4b74229588236fdb32888598ce26fd02958f1694aa3a970f9188204e.exe windows x86
16193bac23d0d0b883da097d7fabee32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetPrivateProfileSectionA
GetStringTypeA
DeleteFileA
GetCurrentThread
CloseHandle
GetFileAttributesA
lstrlenA
CreateEventW
LocalLock
HeapFree
FindVolumeClose
GetPrivateProfileIntW
GetStdHandle
GetDriveTypeA
LoadLibraryA
VirtualProtectEx
DeviceIoControl
OpenMutexA
HeapDestroy
GetCurrentProcess
uxtheme
GetThemeTextExtent
SetWindowTheme
GetThemeSysSize
GetWindowTheme
GetThemeBool
CloseThemeData
DrawThemeBackground
IsThemeActive
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
GetThemeColor
OpenThemeData
odbccp32
SQLInstallDriver
SQLConfigDataSource
SQLGetAvailableDrivers
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ