Static task
static1
Behavioral task
behavioral1
Sample
968b8b57ae41e8cd1b28b5e0b0daebed16124d0ee70b3a4bae71a4ce6a7928f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
968b8b57ae41e8cd1b28b5e0b0daebed16124d0ee70b3a4bae71a4ce6a7928f9.exe
Resource
win10v2004-20220812-en
General
-
Target
968b8b57ae41e8cd1b28b5e0b0daebed16124d0ee70b3a4bae71a4ce6a7928f9
-
Size
311KB
-
MD5
a317ade7a6c40ff0d84560fadb90e870
-
SHA1
5adc3be88926767b34d5e579b07336a573566811
-
SHA256
968b8b57ae41e8cd1b28b5e0b0daebed16124d0ee70b3a4bae71a4ce6a7928f9
-
SHA512
0a2f6ab21248f573462571807ddab37574baba4280dd6e19a30e5aeb1febed50a1d74c609eeccc58ea95b08a32e93b6c45e2b73ea8b9be4226ae68890e547078
-
SSDEEP
6144:xWGLO3YdxUzlpaKRzojqV2GCWuux7x2vaLbwtqUY28qy:xHLOofUzHaKS22GCWXVCqUYq
Malware Config
Signatures
Files
-
968b8b57ae41e8cd1b28b5e0b0daebed16124d0ee70b3a4bae71a4ce6a7928f9.exe windows x86
29c84d117d7d98012a90a3b2b72ee85d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
DeviceIoControl
VirtualProtectEx
LocalLock
GetPrivateProfileIntW
LoadLibraryA
CloseHandle
GetCurrentProcess
HeapFree
FindVolumeClose
HeapDestroy
GetStdHandle
GetStringTypeA
lstrlenA
GetCurrentThread
OpenMutexA
CreateEventW
GetDriveTypeA
DeleteFileA
GetFileAttributesA
GetPrivateProfileSectionA
uxtheme
DrawThemeEdge
GetWindowTheme
GetThemeBool
OpenThemeData
GetThemeTextExtent
IsThemeActive
CloseThemeData
GetThemeTextMetrics
GetThemeSysSize
DrawThemeBackground
GetThemeColor
SetWindowTheme
CloseThemeData
odbccp32
SQLGetAvailableDrivers
SQLInstallDriver
SQLInstallODBC
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ