Static task
static1
Behavioral task
behavioral1
Sample
f0260325f1126842978fcd68b0ac8cfa25a72a0ce98e5476241de44146d3e77e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0260325f1126842978fcd68b0ac8cfa25a72a0ce98e5476241de44146d3e77e.exe
Resource
win10v2004-20220901-en
General
-
Target
f0260325f1126842978fcd68b0ac8cfa25a72a0ce98e5476241de44146d3e77e
-
Size
308KB
-
MD5
a2925dfef2201e75e40cd8aa34e4bc66
-
SHA1
4dfb6ab253ff1fdab2ea5911946c3ffce7c3fbb1
-
SHA256
f0260325f1126842978fcd68b0ac8cfa25a72a0ce98e5476241de44146d3e77e
-
SHA512
da8fa6024720d405a203e29888a1b9a676e679808521878861ec74ee7a4d0794cd080ac8c9c5025a124892d3332fca8162659931e7b34d1132582aa0fbec4743
-
SSDEEP
6144:PCKLEKEd82ead/91x3cIgqkmC9rbBuaqGM42dDUnYGpWFgWenD2h:PbLwdhew/bx3aUC9slGMHsnnyh
Malware Config
Signatures
Files
-
f0260325f1126842978fcd68b0ac8cfa25a72a0ce98e5476241de44146d3e77e.exe windows x86
4fd4c3adb052fe8aea8655078608a002
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResumeThread
CreateEventW
lstrlenA
GetPrivateProfileIntW
GetStringTypeA
GetDriveTypeA
GetTickCount
HeapDestroy
VirtualProtectEx
GetFileAttributesA
CancelIo
ClearCommBreak
GetCurrentProcess
OpenMutexA
DeleteFileA
GetPrivateProfileSectionA
DeviceIoControl
LoadLibraryA
HeapFree
TlsGetValue
DeviceIoControl
uxtheme
GetThemeTextMetrics
IsThemeActive
GetThemeBool
GetThemeTextExtent
GetWindowTheme
GetThemeColor
DrawThemeBackground
DrawThemeEdge
GetThemeSysSize
CloseThemeData
SetWindowTheme
CloseThemeData
OpenThemeData
odbctrac
TraceSQLAllocEnv
TraceSQLAllocStmt
TraceSQLAllocConnect
TraceSQLBindCol
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ