Static task
static1
Behavioral task
behavioral1
Sample
0594945a32d1b395035e7be035cf1644ddaf7f52875245df73f776ea4bdd9f69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0594945a32d1b395035e7be035cf1644ddaf7f52875245df73f776ea4bdd9f69.exe
Resource
win10v2004-20220812-en
General
-
Target
0594945a32d1b395035e7be035cf1644ddaf7f52875245df73f776ea4bdd9f69
-
Size
804KB
-
MD5
5eeb22626efdc45e5ab8f2807b3fb4d0
-
SHA1
7d8014f230f0882d7d85521e3803ad8b4e6d7af0
-
SHA256
0594945a32d1b395035e7be035cf1644ddaf7f52875245df73f776ea4bdd9f69
-
SHA512
16d5287cc11a96c160a51d8c8e68f61d51062c343c824d3918d3da793a6015e6d22cdcb6d9d36d8b72ba773172d7e0f1ff8c5ebffeb882873f19f935afd5e141
-
SSDEEP
24576:uZXyx0mlNy11wEJcXREahTrok1zVa0Ygf4Q:mCx0+IrChTrou1Ya4
Malware Config
Signatures
Files
-
0594945a32d1b395035e7be035cf1644ddaf7f52875245df73f776ea4bdd9f69.exe windows x86
052ad4b02ef88e9773b9866fd9b659c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
LoadLibraryA
CloseHandle
HeapDestroy
GetPrivateProfileSectionA
DeviceIoControl
HeapFree
OpenMutexA
GetStringTypeA
GetCurrentProcess
GetFileAttributesA
FindVolumeClose
DeviceIoControl
lstrlenA
GetCurrentThread
CreateEventW
LocalLock
GetPrivateProfileIntW
GetDriveTypeA
VirtualProtectEx
GetStdHandle
uxtheme
GetThemeColor
GetThemeTextExtent
OpenThemeData
IsThemeActive
CloseThemeData
DrawThemeBackground
GetThemeTextMetrics
GetThemeSysSize
SetWindowTheme
DrawThemeEdge
CloseThemeData
GetThemeBool
GetWindowTheme
odbccp32
SQLInstallDriver
SQLConfigDataSource
SQLGetAvailableDrivers
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ