Static task
static1
Behavioral task
behavioral1
Sample
bddf8da2a0c0ae830c3bf13888858f62b36b5c9304f86fd00cd992fe538e702e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bddf8da2a0c0ae830c3bf13888858f62b36b5c9304f86fd00cd992fe538e702e.exe
Resource
win10v2004-20220812-en
General
-
Target
bddf8da2a0c0ae830c3bf13888858f62b36b5c9304f86fd00cd992fe538e702e
-
Size
76KB
-
MD5
5d84e930033f63245b0475e72a967440
-
SHA1
9c4d024501ebdeeeff0b1f97d776ea212bacf436
-
SHA256
bddf8da2a0c0ae830c3bf13888858f62b36b5c9304f86fd00cd992fe538e702e
-
SHA512
d9ebdf066c2086a3f90ec744239a44f4db02736c8e9f69aa9c19179dcd7ff0ab0b6e9b578485732e1cf94b12aed1a7f7ec4f7ebdc8c65851b181068b7d4b57ba
-
SSDEEP
1536:pTuAgkuyxz8/jOs1DpprUGXcpm+wI21bAN:pTY6han1oGM3wI21
Malware Config
Signatures
Files
-
bddf8da2a0c0ae830c3bf13888858f62b36b5c9304f86fd00cd992fe538e702e.exe windows x86
2bd4b9621aae015c17f9f1d6f7955b8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
CloseHandle
GetStdHandle
VirtualProtectEx
LocalLock
DeviceIoControl
FindVolumeClose
GetFileAttributesA
OpenMutexA
LoadLibraryA
GetPrivateProfileIntW
HeapFree
GetDriveTypeA
CreateEventW
GetStringTypeA
GetPrivateProfileSectionA
DeviceIoControl
lstrlenA
DeleteFileA
GetCurrentThread
HeapDestroy
uxtheme
GetThemeSysSize
GetThemeTextExtent
DrawThemeBackground
GetWindowTheme
CloseThemeData
DrawThemeEdge
IsThemeActive
GetThemeTextMetrics
GetThemeColor
GetThemeBool
OpenThemeData
CloseThemeData
SetWindowTheme
odbccp32
SQLInstallDriver
SQLInstallODBC
SQLConfigDataSource
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ