Static task
static1
Behavioral task
behavioral1
Sample
e001c82aaad21ef15ca5b35f656bb29988db32b56d70958724f4b60b06d4c039.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e001c82aaad21ef15ca5b35f656bb29988db32b56d70958724f4b60b06d4c039.exe
Resource
win10v2004-20220901-en
General
-
Target
e001c82aaad21ef15ca5b35f656bb29988db32b56d70958724f4b60b06d4c039
-
Size
312KB
-
MD5
6edca385b306158120bd7f38cc8e2aef
-
SHA1
2f703147b9522d6c6fabf7d91975772eb0cf7036
-
SHA256
e001c82aaad21ef15ca5b35f656bb29988db32b56d70958724f4b60b06d4c039
-
SHA512
9a66bb5d6013a99da0c885e090bee8548c2a9f153d4a178a18dedc10d8b23209aa7171bb5cad472e6eb3cf9a1c9cf2501f5a965144b7f97cc8a503a220168adf
-
SSDEEP
6144:zSFcLfgq/PNFk9oySb4zIM2F0CrFIEv3iOUh5l59KFY3N:zSFcLfg2VFkqySb26FNFIEfiOUd59L3N
Malware Config
Signatures
Files
-
e001c82aaad21ef15ca5b35f656bb29988db32b56d70958724f4b60b06d4c039.exe windows x86
af283cf95c2c50a21392e721c76e3371
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetStdHandle
VirtualProtectEx
GetCurrentThread
HeapDestroy
GetPrivateProfileSectionA
HeapFree
GetDriveTypeA
GetStringTypeA
lstrlenA
LoadLibraryA
GetFileAttributesA
DeviceIoControl
CloseHandle
CreateEventW
GetPrivateProfileIntW
GetCurrentProcess
LocalLock
DeviceIoControl
FindVolumeClose
OpenMutexA
uxtheme
DrawThemeEdge
IsThemeActive
GetWindowTheme
OpenThemeData
CloseThemeData
GetThemeTextMetrics
GetThemeBool
GetThemeColor
GetThemeTextExtent
SetWindowTheme
DrawThemeBackground
GetThemeSysSize
CloseThemeData
odbccp32
SQLGetAvailableDrivers
SQLInstallDriver
SQLConfigDataSource
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ