Static task
static1
Behavioral task
behavioral1
Sample
5bffd342db6e144c9a20f2737524fe67bf9a609165a0233d90362cbd93815b6e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bffd342db6e144c9a20f2737524fe67bf9a609165a0233d90362cbd93815b6e.exe
Resource
win10v2004-20220901-en
General
-
Target
5bffd342db6e144c9a20f2737524fe67bf9a609165a0233d90362cbd93815b6e
-
Size
76KB
-
MD5
81a3ec1125f3521cf21e41c6d49f9460
-
SHA1
71b245e5f4a241d4426dfd3df740d53e0c1fcf39
-
SHA256
5bffd342db6e144c9a20f2737524fe67bf9a609165a0233d90362cbd93815b6e
-
SHA512
812f8ee2b3c5d77a620c40d3b3922e4c06f0a8ca24cbf912035a05b8948ba53455c8b51df221cafda798633d21118194d281614cf676b49315ef17c443e78e47
-
SSDEEP
1536:nNduckfqW31R5vSCcVhT9m7O6qknTrQBtFD:fucgqW3haCL7OPATr+x
Malware Config
Signatures
Files
-
5bffd342db6e144c9a20f2737524fe67bf9a609165a0233d90362cbd93815b6e.exe windows x86
335828e0be2e9e1da85ecd71346c3e6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
HeapFree
LoadLibraryA
OpenMutexA
DeleteFileA
GetCurrentProcess
DeviceIoControl
GetStdHandle
GetFileAttributesA
HeapDestroy
GetPrivateProfileIntW
VirtualProtectEx
CloseHandle
lstrlenA
LocalLock
GetPrivateProfileSectionA
GetStringTypeA
CreateEventW
DeviceIoControl
FindVolumeClose
GetDriveTypeA
uxtheme
DrawThemeEdge
OpenThemeData
CloseThemeData
SetWindowTheme
GetThemeColor
GetThemeBool
GetThemeTextMetrics
GetThemeSysSize
DrawThemeBackground
GetWindowTheme
GetThemeTextExtent
CloseThemeData
IsThemeActive
odbccp32
SQLGetAvailableDrivers
SQLInstallDriver
SQLConfigDataSource
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ