Static task
static1
Behavioral task
behavioral1
Sample
fc5acbf987cf98b7711062111bf8b6bca2a6d91d08ad5bdbed01d9937a2f2fe3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc5acbf987cf98b7711062111bf8b6bca2a6d91d08ad5bdbed01d9937a2f2fe3.exe
Resource
win10v2004-20220812-en
General
-
Target
fc5acbf987cf98b7711062111bf8b6bca2a6d91d08ad5bdbed01d9937a2f2fe3
-
Size
311KB
-
MD5
960a333efe5433f025387605994dcaf0
-
SHA1
b83d5eccd011c1bf69fb89de6bc721cb6535dbd5
-
SHA256
fc5acbf987cf98b7711062111bf8b6bca2a6d91d08ad5bdbed01d9937a2f2fe3
-
SHA512
341a5c4b61aeb6be6f5c1d9953b344481aa2f7cf8d12783c27f1299de925338ac9d450c7a7b7628c664b7149dd8b7fca7637fe962418b46b7003c7f44ccf7274
-
SSDEEP
6144:qEB0LLUqwyzTLzCgB2Qi9lEaQQJHNHEGt7b/uiCXukut01/ba38WX4ykS:dmLZzzCwqAQLHEGlbJCXukuKWs84X
Malware Config
Signatures
Files
-
fc5acbf987cf98b7711062111bf8b6bca2a6d91d08ad5bdbed01d9937a2f2fe3.exe windows x86
e346e9b061e5fb808c37c9d82e9b699d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
GetDriveTypeA
CreateEventW
GetCurrentProcess
GetPrivateProfileIntW
HeapFree
OpenMutexA
lstrlenA
DeleteFileA
LoadLibraryA
DeviceIoControl
GetStdHandle
FindVolumeClose
GetPrivateProfileSectionA
GetCurrentThread
CloseHandle
GetFileAttributesA
VirtualProtectEx
LocalLock
HeapDestroy
DeviceIoControl
uxtheme
GetThemeBool
CloseThemeData
DrawThemeBackground
DrawThemeEdge
OpenThemeData
GetThemeTextExtent
GetWindowTheme
IsThemeActive
CloseThemeData
GetThemeSysSize
SetWindowTheme
GetThemeColor
GetThemeTextMetrics
odbccp32
SQLInstallODBC
SQLInstallDriver
SQLGetAvailableDrivers
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ