Static task
static1
Behavioral task
behavioral1
Sample
5aa53f772feccb443aaa0a9e2a872f0a349bdad4daf1da7e87a0890d5000de44.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5aa53f772feccb443aaa0a9e2a872f0a349bdad4daf1da7e87a0890d5000de44.exe
Resource
win10v2004-20220812-en
General
-
Target
5aa53f772feccb443aaa0a9e2a872f0a349bdad4daf1da7e87a0890d5000de44
-
Size
310KB
-
MD5
81a4929f8706d2944e2e8e66015cd200
-
SHA1
f8a2d99aa3ed051b792fe145dd540ec4b4309b88
-
SHA256
5aa53f772feccb443aaa0a9e2a872f0a349bdad4daf1da7e87a0890d5000de44
-
SHA512
d8718a96be2d128cc2c0cb13838c7084ef44f38ce595146ba25ff0c31939465084158b0241693f9502bc35ac4c0618cd7870063a4b1ac538e9e8bfb6ce8fbf60
-
SSDEEP
6144:VKL0bapiEvprqj5de/C2fTdRjkJ184ks/jxPI8QCbIlb:VKL0epxR45de/vffIh9rQMA
Malware Config
Signatures
Files
-
5aa53f772feccb443aaa0a9e2a872f0a349bdad4daf1da7e87a0890d5000de44.exe windows x86
9688a8be807bd88fe91b93915b08fa1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalLock
DeleteFileA
FindVolumeClose
DeviceIoControl
VirtualProtectEx
CreateEventW
GetDriveTypeA
DeviceIoControl
GetFileAttributesA
GetPrivateProfileIntW
OpenMutexA
GetStdHandle
GetCurrentThread
GetCurrentProcess
GetStringTypeA
HeapDestroy
CloseHandle
lstrlenA
GetPrivateProfileSectionA
HeapFree
LoadLibraryA
uxtheme
GetThemeSysSize
SetWindowTheme
GetThemeBool
IsThemeActive
OpenThemeData
DrawThemeEdge
CloseThemeData
GetThemeTextMetrics
CloseThemeData
GetThemeColor
DrawThemeBackground
GetThemeTextExtent
GetWindowTheme
odbccp32
SQLGetAvailableDrivers
SQLConfigDataSource
SQLInstallDriver
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ