Static task
static1
Behavioral task
behavioral1
Sample
f2c4b376bd37939c020f21465b95897ac77761e39247ed02916fb35b91c62dea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2c4b376bd37939c020f21465b95897ac77761e39247ed02916fb35b91c62dea.exe
Resource
win10v2004-20220812-en
General
-
Target
f2c4b376bd37939c020f21465b95897ac77761e39247ed02916fb35b91c62dea
-
Size
310KB
-
MD5
622c9b14e2eff21ec6abb7b7dd7c1720
-
SHA1
57f345a8e2e2e2823dfbd808934f4b0474b62214
-
SHA256
f2c4b376bd37939c020f21465b95897ac77761e39247ed02916fb35b91c62dea
-
SHA512
4fd78f36a64ef9627018b59320fac7bd074e79bda98d7e08aa68ab448cebe76370f39758151586fd7b06dd8d73fa65111d0007dfd27cf021dab7fa64a67cfca0
-
SSDEEP
6144:+vLg+LgDtiPjxkoj/moYv2ugc0OmPA+9oG1xWnHg:mLg+LLqojeoYv2ugc0OMY
Malware Config
Signatures
Files
-
f2c4b376bd37939c020f21465b95897ac77761e39247ed02916fb35b91c62dea.exe windows x86
3ea50bf5d68635c0101358c7d5aa1209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
DeleteFileA
CreateEventW
GetStringTypeA
FindVolumeClose
VirtualProtectEx
GetCurrentThread
GetDriveTypeA
lstrlenA
LocalLock
DeviceIoControl
CloseHandle
GetPrivateProfileSectionA
GetCurrentProcess
OpenMutexA
HeapDestroy
GetStdHandle
DeviceIoControl
HeapFree
GetPrivateProfileIntW
GetFileAttributesA
uxtheme
SetWindowTheme
GetThemeColor
DrawThemeBackground
DrawThemeEdge
CloseThemeData
OpenThemeData
GetThemeTextExtent
GetThemeTextMetrics
GetThemeSysSize
CloseThemeData
GetThemeBool
GetWindowTheme
IsThemeActive
odbccp32
SQLConfigDataSource
SQLGetAvailableDrivers
SQLInstallDriver
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ