Static task
static1
Behavioral task
behavioral1
Sample
563c5e25b609df1b7901f7465f9fc4499002bd0bb9bd2c4357acd6de437f4f43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
563c5e25b609df1b7901f7465f9fc4499002bd0bb9bd2c4357acd6de437f4f43.exe
Resource
win10v2004-20220812-en
General
-
Target
563c5e25b609df1b7901f7465f9fc4499002bd0bb9bd2c4357acd6de437f4f43
-
Size
308KB
-
MD5
a213238d0aed8e4963bcf9d95684b030
-
SHA1
acc0397a8919737a687b8003a1dd00a547c574d8
-
SHA256
563c5e25b609df1b7901f7465f9fc4499002bd0bb9bd2c4357acd6de437f4f43
-
SHA512
9ff9bc9846de8b3e6b3ae6d1392d67cb2fd73d3a6bf83c182ac1eb922ceda101d1f7f63efea0fbd851b2a7480e85cea880d2022791be9ec604df05858f309852
-
SSDEEP
6144:a9nzLXbdo2kFdhsHN4KVHBsZDfDO29mB8LPX9bStB6fT0bIBlxefa:aFLXbqRFdhsttVIDfDO29TLPXhSCWIBl
Malware Config
Signatures
Files
-
563c5e25b609df1b7901f7465f9fc4499002bd0bb9bd2c4357acd6de437f4f43.exe windows x86
1337f11973dbb15c9d8af69ef3d269c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetPrivateProfileIntW
ClearCommBreak
GetProcessHeap
CreateEventW
lstrlenA
GetPrivateProfileSectionA
VirtualProtectEx
GetFileAttributesA
OpenMutexW
ResumeThread
GetCurrentProcess
GetDriveTypeA
DeviceIoControl
HeapFree
LoadLibraryW
SetLastError
DeleteFileA
TlsGetValue
HeapDestroy
GetStringTypeA
uxtheme
GetThemeBool
GetThemeTextMetrics
GetThemeTextExtent
DrawThemeEdge
GetThemeColor
IsThemeActive
GetThemeSysSize
OpenThemeData
DrawThemeBackground
GetWindowTheme
SetWindowTheme
CloseThemeData
CloseThemeData
odbctrac
TraceSQLAllocEnv
TraceSQLAllocStmt
TraceSQLAllocConnect
TraceSQLBindCol
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ