Static task
static1
Behavioral task
behavioral1
Sample
517e7d37efaceb523c34ef902c707d8adb68626a734ad141f34fe8a58cd4c782.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
517e7d37efaceb523c34ef902c707d8adb68626a734ad141f34fe8a58cd4c782.exe
Resource
win10v2004-20220812-en
General
-
Target
517e7d37efaceb523c34ef902c707d8adb68626a734ad141f34fe8a58cd4c782
-
Size
308KB
-
MD5
4a30ba6731e4c72c3a128c9545f1a780
-
SHA1
e404c46e97cc5ac6a5855da5d659004812cae65c
-
SHA256
517e7d37efaceb523c34ef902c707d8adb68626a734ad141f34fe8a58cd4c782
-
SHA512
7075d399432348f323120f096e79d9336dc2252ea42b5e97c2a29ac708cdb439d5b3b3cb7ec2965c01413d4e4f8abdf164dad6db17c660ba3157c54acae23dde
-
SSDEEP
6144:nOWsLUe6aRFBa+6sGKF4z/d2vRsn1Ub9ha/rI/omU6CuVlcCfXBkRGMUn:rsLUebRFBaNK75sn1surMYusyoG/n
Malware Config
Signatures
Files
-
517e7d37efaceb523c34ef902c707d8adb68626a734ad141f34fe8a58cd4c782.exe windows x86
c536d49192a8dd25e055dddf54a60d91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
GetDriveTypeA
TlsGetValue
lstrlenA
SetLastError
CreateEventW
GetStringTypeA
DeleteFileA
LoadLibraryW
VirtualProtectEx
DeviceIoControl
GetPrivateProfileSectionA
DeviceIoControl
HeapFree
HeapDestroy
GetCurrentProcess
OpenMutexW
ClearCommBreak
GetPrivateProfileIntW
ResumeThread
GetProcessHeap
uxtheme
GetThemeTextMetrics
CloseThemeData
GetThemeSysSize
GetWindowTheme
GetThemeBool
IsThemeActive
DrawThemeBackground
GetThemeColor
CloseThemeData
OpenThemeData
SetWindowTheme
GetThemeTextExtent
DrawThemeEdge
odbctrac
TraceSQLAllocEnv
TraceSQLAllocConnect
TraceSQLAllocStmt
TraceSQLBindCol
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ