Static task
static1
Behavioral task
behavioral1
Sample
d184f0deaf3a51e848c6bfd7b29698756e5dadf209cbe95718c0853ce6438e6a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d184f0deaf3a51e848c6bfd7b29698756e5dadf209cbe95718c0853ce6438e6a.exe
Resource
win10v2004-20220812-en
General
-
Target
d184f0deaf3a51e848c6bfd7b29698756e5dadf209cbe95718c0853ce6438e6a
-
Size
133KB
-
MD5
6e3222ea3370f2c755ded17e04ea7d43
-
SHA1
034462d2bb98e02e31bbd5654eba1522c3f24292
-
SHA256
d184f0deaf3a51e848c6bfd7b29698756e5dadf209cbe95718c0853ce6438e6a
-
SHA512
b6533d62310233f772239dee9fddcc7708d3e34da0d0e78a5073569c7d1bac90aa1aef110b027e11ab164602792712dfd41c2d289a11ad8e392a0f3f5719fdeb
-
SSDEEP
3072:MH7a/6n+afl+A1T8bR6QNH21auKopjZ2ZKjn0:C7aET1TKFH21dZV8K
Malware Config
Signatures
Files
-
d184f0deaf3a51e848c6bfd7b29698756e5dadf209cbe95718c0853ce6438e6a.exe windows x86
de86ab23260caa5a91399e5a44d3fedc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetCurrentProcess
OpenMutexA
LoadLibraryA
GetCurrentThread
LocalLock
FindVolumeClose
GetPrivateProfileSectionA
VirtualProtectEx
GetStringTypeA
HeapDestroy
GetStdHandle
GetDriveTypeA
GetFileAttributesA
HeapFree
CreateEventW
CloseHandle
GetPrivateProfileIntW
lstrlenA
DeleteFileA
DeviceIoControl
uxtheme
CloseThemeData
GetWindowTheme
GetThemeColor
GetThemeSysSize
GetThemeBool
IsThemeActive
CloseThemeData
OpenThemeData
GetThemeTextMetrics
SetWindowTheme
DrawThemeEdge
GetThemeTextExtent
DrawThemeBackground
odbccp32
SQLGetAvailableDrivers
SQLInstallODBC
SQLConfigDataSource
SQLInstallDriver
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ