Static task
static1
Behavioral task
behavioral1
Sample
ed351c2791c6b158cdbc6d07fa8332fd2a1c48b2ed75805743a1debdd5a1020c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed351c2791c6b158cdbc6d07fa8332fd2a1c48b2ed75805743a1debdd5a1020c.exe
Resource
win10v2004-20220812-en
General
-
Target
ed351c2791c6b158cdbc6d07fa8332fd2a1c48b2ed75805743a1debdd5a1020c
-
Size
803KB
-
MD5
121054b291c204114fb226f2e83462e6
-
SHA1
4d546701ffe6e0859e4748874064d79f5972d6aa
-
SHA256
ed351c2791c6b158cdbc6d07fa8332fd2a1c48b2ed75805743a1debdd5a1020c
-
SHA512
d9b9251462970a7e04851190887dfa679ab6503db700a931746ce7a017afb1c9f375273b41cfc089306b62432760706bb46fe3c6f17e25ceaf4214524fbdfee3
-
SSDEEP
12288:W/Et2BdWQh3FW+gvI+pZc2SmzTz3C0GRdwmtIQJ2qu+P6juitbs6IvQq:eEtCADDrcRmPz3LRmtZu+S/bsdvQ
Malware Config
Signatures
Files
-
ed351c2791c6b158cdbc6d07fa8332fd2a1c48b2ed75805743a1debdd5a1020c.exe windows x86
67c5c4ca2a48fe4c5ce41166cba7c823
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
DeleteFileA
HeapDestroy
GetPrivateProfileSectionA
CreateEventW
OpenMutexA
DeviceIoControl
FindVolumeClose
GetDriveTypeA
GetFileAttributesA
GetCurrentProcess
VirtualProtectEx
DeviceIoControl
GetPrivateProfileIntW
CloseHandle
HeapFree
LoadLibraryA
LocalLock
GetStdHandle
GetCurrentThread
lstrlenA
uxtheme
GetThemeSysSize
IsThemeActive
CloseThemeData
GetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData
GetThemeBool
DrawThemeEdge
SetWindowTheme
GetThemeTextMetrics
GetThemeColor
GetThemeTextExtent
odbccp32
SQLInstallODBC
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ