Static task
static1
Behavioral task
behavioral1
Sample
f46ab1a4dbaacf19da96c5347585ac08d8b78ab8114cba8eea1e0379488e6cb8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f46ab1a4dbaacf19da96c5347585ac08d8b78ab8114cba8eea1e0379488e6cb8.exe
Resource
win10v2004-20220901-en
General
-
Target
f46ab1a4dbaacf19da96c5347585ac08d8b78ab8114cba8eea1e0379488e6cb8
-
Size
131KB
-
MD5
645ee0043e7086418b86ec7a4a0e9e10
-
SHA1
ebe00570f66c5308f3d441d2ba00456ab52e73ef
-
SHA256
f46ab1a4dbaacf19da96c5347585ac08d8b78ab8114cba8eea1e0379488e6cb8
-
SHA512
ce907006e211fae9e6814e2c713fd236d497fc516497e76a3518a976600805d7a570421cafbafb12efa188048879230cc804a15cccbd3d01a073c9d5b4f42477
-
SSDEEP
3072:d+ioqniRaMaNMO2agYxAv3NNq6FNrCJmFEi5:BniRgMORvxINND
Malware Config
Signatures
Files
-
f46ab1a4dbaacf19da96c5347585ac08d8b78ab8114cba8eea1e0379488e6cb8.exe windows x86
1069542eafae90364eb2f53f9d6117b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
VirtualProtectEx
lstrlenA
GetCurrentProcess
DeviceIoControl
GetFileAttributesA
FindVolumeClose
GetDriveTypeA
HeapFree
OpenMutexA
DeviceIoControl
GetStdHandle
CreateEventW
LocalLock
GetStringTypeA
GetPrivateProfileIntW
CloseHandle
LoadLibraryA
GetPrivateProfileSectionA
DeleteFileA
HeapDestroy
uxtheme
CloseThemeData
GetThemeSysSize
GetThemeTextMetrics
GetThemeColor
GetThemeBool
DrawThemeEdge
IsThemeActive
CloseThemeData
SetWindowTheme
DrawThemeBackground
GetWindowTheme
OpenThemeData
GetThemeTextExtent
odbccp32
SQLInstallDriver
SQLGetAvailableDrivers
SQLInstallODBC
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ