Static task
static1
Behavioral task
behavioral1
Sample
b298c89b0df1348f8367d56de2f31181baf7eb45c7f215a2b40f204e48f14f32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b298c89b0df1348f8367d56de2f31181baf7eb45c7f215a2b40f204e48f14f32.exe
Resource
win10v2004-20220812-en
General
-
Target
b298c89b0df1348f8367d56de2f31181baf7eb45c7f215a2b40f204e48f14f32
-
Size
311KB
-
MD5
9350ff46a5fc410187aab2d4b29ecac0
-
SHA1
b939dd9a95c157ef37c7bf4347a3bb829e77050b
-
SHA256
b298c89b0df1348f8367d56de2f31181baf7eb45c7f215a2b40f204e48f14f32
-
SHA512
7d29b23fd2b7270fd236543b918d3026670de12cbfed9abe9e764029329a954de3227832b5f43bcb64cad9196ae8ffd4dc8d1ea62f84a71861a3ac2340e449fd
-
SSDEEP
6144:jH/iL61/BSAuIEzGAMm9+tuyzfnIhC+HG5bx:jqLyBl/sf5ERNh5
Malware Config
Signatures
Files
-
b298c89b0df1348f8367d56de2f31181baf7eb45c7f215a2b40f204e48f14f32.exe windows x86
74b1467ec778ca703185f8f2e2887e18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
lstrlenA
GetPrivateProfileIntW
CreateEventW
OpenMutexA
GetFileAttributesA
GetStdHandle
DeviceIoControl
FindVolumeClose
LocalLock
LoadLibraryA
GetStringTypeA
GetPrivateProfileSectionA
GetDriveTypeA
HeapFree
CloseHandle
DeleteFileA
VirtualProtectEx
HeapDestroy
GetCurrentProcess
GetCurrentThread
uxtheme
GetThemeTextMetrics
IsThemeActive
GetThemeSysSize
GetWindowTheme
DrawThemeBackground
DrawThemeEdge
SetWindowTheme
CloseThemeData
CloseThemeData
GetThemeColor
GetThemeBool
GetThemeTextExtent
OpenThemeData
odbccp32
SQLInstallODBC
SQLInstallDriver
SQLConfigDataSource
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ