Static task
static1
Behavioral task
behavioral1
Sample
ae76d7779f1d52fcb1f315123abd09220991aab0f95e4aa0bd4362dfcd8f12a7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ae76d7779f1d52fcb1f315123abd09220991aab0f95e4aa0bd4362dfcd8f12a7.exe
Resource
win10v2004-20220812-en
General
-
Target
ae76d7779f1d52fcb1f315123abd09220991aab0f95e4aa0bd4362dfcd8f12a7
-
Size
135KB
-
MD5
3c5519588620e58be81bca0fb8fe2e80
-
SHA1
5358924271ca428e8a1fd1ff5d4fcd42056553b3
-
SHA256
ae76d7779f1d52fcb1f315123abd09220991aab0f95e4aa0bd4362dfcd8f12a7
-
SHA512
05ced765182c11223b8e549cb373afc8e7269a780a4c605ae56820d47397f0fc9abe6436b5595f7fb51257c53196f3a00f9a1003609fc5c1dfa925bd95ae47f9
-
SSDEEP
3072:QA5yCWLFz1xad/ZAkNxU7VQJSLkG/8Mx5FaZgX:+O/ZS+JWku8K
Malware Config
Signatures
Files
-
ae76d7779f1d52fcb1f315123abd09220991aab0f95e4aa0bd4362dfcd8f12a7.exe windows x86
5860ea632bd1d448acae6f42d3330447
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
GetDriveTypeA
HeapFree
LoadLibraryA
DeviceIoControl
TlsGetValue
GetPrivateProfileIntW
DeviceIoControl
DeleteFileA
OpenMutexA
FindVolumeClose
GetPrivateProfileSectionA
HeapDestroy
GetStringTypeA
ClearCommBreak
CancelIo
lstrlenA
GetCurrentProcess
GetFileAttributesA
GetTickCount
CreateEventW
uxtheme
IsThemeActive
GetThemeTextMetrics
CloseThemeData
GetThemeSysSize
GetWindowTheme
DrawThemeBackground
DrawThemeEdge
CloseThemeData
GetThemeTextExtent
GetThemeBool
SetWindowTheme
OpenThemeData
GetThemeColor
odbccp32
SQLConfigDataSource
SQLInstallODBC
SQLGetAvailableDrivers
SQLInstallDriver
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ