Static task
static1
Behavioral task
behavioral1
Sample
64a5910d99431c371855c7f18f83449b243614abaf8055a9b89b8daca4af1b1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64a5910d99431c371855c7f18f83449b243614abaf8055a9b89b8daca4af1b1f.exe
Resource
win10v2004-20220812-en
General
-
Target
64a5910d99431c371855c7f18f83449b243614abaf8055a9b89b8daca4af1b1f
-
Size
134KB
-
MD5
9058ff6caa56802be7b615f6fd3326d2
-
SHA1
d7722349a7d18d3c17b5573f54f012f4db635422
-
SHA256
64a5910d99431c371855c7f18f83449b243614abaf8055a9b89b8daca4af1b1f
-
SHA512
c9e040eebebad63da919407e3699d74d9002a6e590288e47187a6f5a81ab483ed4879682f995f059cc3de90be4a775f52bb94bcccf112fba853fc1f9cb50446e
-
SSDEEP
1536:DaGSlGQttKbnOT5t+BgTc1kH6gQ37ArkUhO3ITcYgHZeffoOU923XOc07oJ9x/nY:WU7S79sAryIOHZefmE6q9mJ89a423
Malware Config
Signatures
Files
-
64a5910d99431c371855c7f18f83449b243614abaf8055a9b89b8daca4af1b1f.exe windows x86
8a72e21132f6c0ed52b8a0a134d1bc26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
DeviceIoControl
TlsGetValue
ClearCommBreak
lstrlenA
GetProcessHeap
HeapDestroy
DeleteFileA
GetStringTypeA
GetCurrentProcess
DeviceIoControl
GetFileAttributesA
OpenMutexW
GetPrivateProfileSectionA
SetLastError
GetDriveTypeA
CreateEventW
VirtualProtectEx
GetPrivateProfileIntW
HeapFree
ResumeThread
uxtheme
GetThemeSysSize
CloseThemeData
CloseThemeData
GetThemeColor
GetThemeTextMetrics
IsThemeActive
GetThemeTextExtent
DrawThemeBackground
GetThemeBool
GetWindowTheme
OpenThemeData
DrawThemeEdge
SetWindowTheme
odbctrac
TraceSQLAllocEnv
TraceSQLAllocConnect
TraceSQLBindCol
TraceSQLAllocStmt
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ