Static task
static1
Behavioral task
behavioral1
Sample
5f65891859d42985781a6fe16f94c8881592c306bf5ccf7521ef0395a415222c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f65891859d42985781a6fe16f94c8881592c306bf5ccf7521ef0395a415222c.exe
Resource
win10v2004-20220812-en
General
-
Target
5f65891859d42985781a6fe16f94c8881592c306bf5ccf7521ef0395a415222c
-
Size
308KB
-
MD5
a2037cb5e29f251af44fe7f206357740
-
SHA1
b781267efeafee245a647e5cab2da1acc3522ac4
-
SHA256
5f65891859d42985781a6fe16f94c8881592c306bf5ccf7521ef0395a415222c
-
SHA512
9e631a4083ee72504a3efbd1e2a98e277838e8b160c9388d36fa2735664bff020ba61a837de28950640b1957145941aebd089950ef1e646ed69147747b7cb23f
-
SSDEEP
6144:S/LogrOc0bzDxNj8gDO5ktOAxbqLjmRjDWQ9turi8PSJwp6Aq9:oL/OZzntOMmjmRjKWqi8Pe
Malware Config
Signatures
Files
-
5f65891859d42985781a6fe16f94c8881592c306bf5ccf7521ef0395a415222c.exe windows x86
4df5d0a96cc9f05d6cd54b3e37fe34cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
DeviceIoControl
GetProcessHeap
GetPrivateProfileSectionA
HeapFree
GetPrivateProfileIntW
SetLastError
GetCurrentProcess
GetDriveTypeA
LoadLibraryW
DeviceIoControl
lstrlenA
VirtualProtectEx
DeleteFileA
OpenMutexW
TlsGetValue
ResumeThread
HeapDestroy
GetStringTypeA
CreateEventW
ClearCommBreak
uxtheme
GetThemeBool
DrawThemeEdge
GetThemeTextMetrics
GetThemeSysSize
CloseThemeData
CloseThemeData
IsThemeActive
DrawThemeBackground
SetWindowTheme
GetThemeColor
GetThemeTextExtent
GetWindowTheme
OpenThemeData
odbctrac
TraceSQLBindCol
TraceSQLAllocEnv
TraceSQLAllocConnect
TraceSQLAllocStmt
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ