Static task
static1
Behavioral task
behavioral1
Sample
85fc0e9b4747980eb60b95ce64c620611c51b642c6665775d5a27730ddecdb02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85fc0e9b4747980eb60b95ce64c620611c51b642c6665775d5a27730ddecdb02.exe
Resource
win10v2004-20220812-en
General
-
Target
85fc0e9b4747980eb60b95ce64c620611c51b642c6665775d5a27730ddecdb02
-
Size
311KB
-
MD5
634d48faa25b70d8b6589f443e0489e6
-
SHA1
e10ea8e0098565df244e56b06bd999021f8ca7f5
-
SHA256
85fc0e9b4747980eb60b95ce64c620611c51b642c6665775d5a27730ddecdb02
-
SHA512
b3853d59833946d67cfcfeb10d89235a6242852e3c573ac8fce9cb315940865f172f517f4ad1835e14dbfb15f129acf5ba179be3ca66888211a552349a44be74
-
SSDEEP
6144:NisL8E/Mp44+NLmpJVERnWTXp9V7e3QPvdZqv+LLbWQPOEoR:NRL7/M+9mpLoWT5SgHdEvwndu
Malware Config
Signatures
Files
-
85fc0e9b4747980eb60b95ce64c620611c51b642c6665775d5a27730ddecdb02.exe windows x86
54e561e41ac5996474ffe411e1d54e29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
FindVolumeClose
GetCurrentThread
LoadLibraryA
VirtualProtectEx
GetStdHandle
CloseHandle
GetStringTypeA
HeapDestroy
OpenMutexA
lstrlenA
HeapFree
GetPrivateProfileIntW
LocalLock
GetFileAttributesA
DeleteFileA
GetDriveTypeA
GetCurrentProcess
DeviceIoControl
CreateEventW
DeviceIoControl
uxtheme
DrawThemeBackground
GetThemeBool
GetWindowTheme
IsThemeActive
GetThemeTextMetrics
CloseThemeData
CloseThemeData
GetThemeTextExtent
GetThemeColor
OpenThemeData
DrawThemeEdge
GetThemeSysSize
SetWindowTheme
odbccp32
SQLInstallODBC
SQLInstallDriver
SQLConfigDataSource
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ