Static task
static1
Behavioral task
behavioral1
Sample
1de79402d3c39bf8e1486e0a1d41bdeeef2afac126bcfbc734f952e69df6c2fe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1de79402d3c39bf8e1486e0a1d41bdeeef2afac126bcfbc734f952e69df6c2fe.exe
Resource
win10v2004-20220812-en
General
-
Target
1de79402d3c39bf8e1486e0a1d41bdeeef2afac126bcfbc734f952e69df6c2fe
-
Size
76KB
-
MD5
a2ba7b4924e0b260a2f0d8253f8f0ac3
-
SHA1
aeca09cbac5d03333944fcd742d95b2835676129
-
SHA256
1de79402d3c39bf8e1486e0a1d41bdeeef2afac126bcfbc734f952e69df6c2fe
-
SHA512
45ae464e3cbeacc93f468214cf615853febc9313f46b989147b43f218c3c78104e2e13922d1773b075ab7a7f321346670b54aa5437ca39c2f432d1ab31716cac
-
SSDEEP
1536:kSKvgRY+s501Oo5UXi+l2srAbk4qL7eA6Ss4D:kSKytK017UXDfJlaA6
Malware Config
Signatures
Files
-
1de79402d3c39bf8e1486e0a1d41bdeeef2afac126bcfbc734f952e69df6c2fe.exe windows x86
537259d93656bc87621b5dc2f8a06bc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetStringTypeA
OpenMutexA
DeviceIoControl
DeleteFileA
DeviceIoControl
GetFileAttributesA
CloseHandle
FindVolumeClose
CreateEventW
HeapDestroy
GetDriveTypeA
GetPrivateProfileSectionA
lstrlenA
VirtualProtectEx
GetCurrentThread
GetStdHandle
LoadLibraryA
GetPrivateProfileIntW
GetCurrentProcess
LocalLock
uxtheme
CloseThemeData
GetThemeColor
IsThemeActive
DrawThemeEdge
GetThemeBool
GetThemeTextExtent
GetThemeTextMetrics
DrawThemeBackground
GetWindowTheme
GetThemeSysSize
SetWindowTheme
CloseThemeData
OpenThemeData
odbccp32
SQLInstallDriver
SQLGetAvailableDrivers
SQLInstallODBC
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ