Static task
static1
Behavioral task
behavioral1
Sample
d2d2285d690240b99fedce261cd9a2a14e4c543539dd9a67a74ea58d6ff66c03.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d2d2285d690240b99fedce261cd9a2a14e4c543539dd9a67a74ea58d6ff66c03.exe
Resource
win10v2004-20220812-en
General
-
Target
d2d2285d690240b99fedce261cd9a2a14e4c543539dd9a67a74ea58d6ff66c03
-
Size
308KB
-
MD5
81628c462c071ae37b6bf3b8d8fc4010
-
SHA1
689c23282d442404b762fa86b19ae571ea72e9d4
-
SHA256
d2d2285d690240b99fedce261cd9a2a14e4c543539dd9a67a74ea58d6ff66c03
-
SHA512
3541b21e79f7c3023913c0be3e60a2d89ce5cd41286edeeb33a291678f6a7399f520d7d34b20a150e395ba17032dbf818f22d8c4501e9f1434015140d5fe03b2
-
SSDEEP
6144:xrxLtAIzUNDMHlq/8kJjrPn9H+BnNbJcrBEHcyZw2:xNLtAIU4lq/VV+BZkpyK
Malware Config
Signatures
Files
-
d2d2285d690240b99fedce261cd9a2a14e4c543539dd9a67a74ea58d6ff66c03.exe windows x86
bc691e6d6df4a771d8c9ac76d09cc8bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetCurrentProcess
DeviceIoControl
GetDriveTypeA
GetFileAttributesA
DeviceIoControl
VirtualProtectEx
ClearCommBreak
GetProcessHeap
ResumeThread
GetPrivateProfileSectionA
GetStringTypeA
DeleteFileA
lstrlenA
SetLastError
TlsGetValue
OpenMutexW
GetPrivateProfileIntW
HeapFree
CreateEventW
LoadLibraryA
uxtheme
GetThemeSysSize
GetThemeTextMetrics
OpenThemeData
CloseThemeData
GetThemeTextExtent
GetWindowTheme
DrawThemeBackground
SetWindowTheme
DrawThemeEdge
GetThemeColor
GetThemeBool
CloseThemeData
IsThemeActive
odbctrac
TraceSQLAllocEnv
TraceSQLBindCol
TraceSQLAllocStmt
TraceSQLAllocConnect
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ