Static task
static1
Behavioral task
behavioral1
Sample
5c08c5d4b3828291b34f10b780acbf6251f515afb5deb7026edb0ebd181d5131.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5c08c5d4b3828291b34f10b780acbf6251f515afb5deb7026edb0ebd181d5131.exe
Resource
win10v2004-20220901-en
General
-
Target
5c08c5d4b3828291b34f10b780acbf6251f515afb5deb7026edb0ebd181d5131
-
Size
135KB
-
MD5
7c69503e39b70f4f4b7d374885472070
-
SHA1
a01a5f0a0b3ebe2855bccde2fec211f36d5e8588
-
SHA256
5c08c5d4b3828291b34f10b780acbf6251f515afb5deb7026edb0ebd181d5131
-
SHA512
20bcb27a5fb5c702f78709ae4132de9459218ce1dba183ab70dd850ac7a8f97d124e21b1362d7a1138ac1f6de73b7540d945f2d58c87ff1d52be88d9222afdeb
-
SSDEEP
3072:4AaBrBY210XcwHjaVKverCRFoAmWgqbmb33aT:JaFpQcclerCToLS8q
Malware Config
Signatures
Files
-
5c08c5d4b3828291b34f10b780acbf6251f515afb5deb7026edb0ebd181d5131.exe windows x86
8c457d262a11fa4e8d29fc1b7fde76e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
GetPrivateProfileIntW
lstrlenA
GetDriveTypeA
DeleteFileA
DeviceIoControl
CancelIo
CreateEventW
GetPrivateProfileSectionA
HeapDestroy
GetStringTypeA
TlsGetValue
FindVolumeClose
OpenMutexA
DeviceIoControl
LoadLibraryA
ClearCommBreak
GetTickCount
VirtualProtectEx
HeapFree
GetFileAttributesA
uxtheme
DrawThemeBackground
OpenThemeData
GetThemeSysSize
DrawThemeEdge
GetWindowTheme
SetWindowTheme
GetThemeBool
GetThemeTextMetrics
GetThemeColor
CloseThemeData
IsThemeActive
GetThemeTextExtent
CloseThemeData
odbccp32
SQLInstallODBC
SQLInstallDriver
SQLGetAvailableDrivers
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ