Static task
static1
Behavioral task
behavioral1
Sample
0c4dcca3f3077dccfd691e41984c40c6bbca6da5af230e74fae09319fed9b3a4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0c4dcca3f3077dccfd691e41984c40c6bbca6da5af230e74fae09319fed9b3a4.exe
Resource
win10v2004-20220812-en
General
-
Target
0c4dcca3f3077dccfd691e41984c40c6bbca6da5af230e74fae09319fed9b3a4
-
Size
135KB
-
MD5
93105539b326468cc70d6db2093af660
-
SHA1
3627da481d6f4dc5714247e87fde15d3ee77e0c6
-
SHA256
0c4dcca3f3077dccfd691e41984c40c6bbca6da5af230e74fae09319fed9b3a4
-
SHA512
af37b759513176e0cdcd36866ea562c486a35c04d9446822e276c16b1ee0c3da1173609784952305879bfde24ed4115f9b55363c4822c331070f573acdef6f1f
-
SSDEEP
1536:yr2gCNj+yLvyejWx4f4XY8scUSKEJWVtlCXBBzt7RTRIbeggGAZRrFM5HM3zrT/:m2dO4f4o1rSDJkWRB5xRICgUZRrUEn
Malware Config
Signatures
Files
-
0c4dcca3f3077dccfd691e41984c40c6bbca6da5af230e74fae09319fed9b3a4.exe windows x86
c6dd933a18ea2db312449d96c68caefa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
DeleteFileA
GetTickCount
GetPrivateProfileSectionA
FindVolumeClose
VirtualProtectEx
CancelIo
GetDriveTypeA
GetStringTypeA
GetCurrentProcess
LoadLibraryA
ClearCommBreak
CreateEventW
GetPrivateProfileIntW
TlsGetValue
DeviceIoControl
HeapFree
DeviceIoControl
OpenMutexA
GetFileAttributesA
HeapDestroy
uxtheme
OpenThemeData
GetThemeColor
IsThemeActive
GetThemeBool
CloseThemeData
GetThemeTextMetrics
GetThemeSysSize
DrawThemeBackground
GetThemeTextExtent
SetWindowTheme
CloseThemeData
GetWindowTheme
DrawThemeEdge
odbccp32
SQLGetAvailableDrivers
SQLInstallDriver
SQLConfigDataSource
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ