Static task
static1
Behavioral task
behavioral1
Sample
07c890841774e6b39f4b30e6cfbf2b5cb50b91abc7ce5e750ca346dca7f77cc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07c890841774e6b39f4b30e6cfbf2b5cb50b91abc7ce5e750ca346dca7f77cc3.exe
Resource
win10v2004-20220901-en
General
-
Target
07c890841774e6b39f4b30e6cfbf2b5cb50b91abc7ce5e750ca346dca7f77cc3
-
Size
131KB
-
MD5
60770925fb17f43994f327690c277a50
-
SHA1
53cdef94eb9d209a5c9b8e663a2302495771ed68
-
SHA256
07c890841774e6b39f4b30e6cfbf2b5cb50b91abc7ce5e750ca346dca7f77cc3
-
SHA512
23e057f7d642e9a12d84b787b90d62c4217eab91d9909a91106cac737c9be189ff989a8747782d92ad59de4687c931397d6b9b3027b14a12d3f7888a8d6b5786
-
SSDEEP
3072:79BWj6X5w2oR+srDAlfDZAoYMo0cKpjbKVuRR4b7:ZBMJ+srDC7tR4b7
Malware Config
Signatures
Files
-
07c890841774e6b39f4b30e6cfbf2b5cb50b91abc7ce5e750ca346dca7f77cc3.exe windows x86
65629c16d91f98b1f4f475dd2b3b3435
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
GetCurrentProcess
GetCurrentThread
lstrlenA
HeapDestroy
FindVolumeClose
CreateEventW
GetDriveTypeA
GetStringTypeA
HeapFree
GetStdHandle
LocalLock
DeviceIoControl
CloseHandle
DeviceIoControl
GetPrivateProfileSectionA
DeleteFileA
OpenMutexA
LoadLibraryA
GetPrivateProfileIntW
GetFileAttributesA
uxtheme
CloseThemeData
GetThemeSysSize
IsThemeActive
GetWindowTheme
SetWindowTheme
OpenThemeData
DrawThemeEdge
GetThemeBool
DrawThemeBackground
GetThemeTextMetrics
CloseThemeData
GetThemeColor
GetThemeTextExtent
odbccp32
SQLInstallDriver
SQLInstallODBC
SQLGetAvailableDrivers
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ