Static task
static1
Behavioral task
behavioral1
Sample
74969d361290f486c40239ffe10ca4feb2582a88142a655a73d743006ee34458.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
74969d361290f486c40239ffe10ca4feb2582a88142a655a73d743006ee34458.exe
Resource
win10v2004-20220901-en
General
-
Target
74969d361290f486c40239ffe10ca4feb2582a88142a655a73d743006ee34458
-
Size
312KB
-
MD5
4149318b827e38cb453fa50ea5a6d8d0
-
SHA1
aa3ed0381d78b0b307bf0fb8e88b05db01522a53
-
SHA256
74969d361290f486c40239ffe10ca4feb2582a88142a655a73d743006ee34458
-
SHA512
4ec1c06ed892eb2d71d26e34602d1683dca7459bb0f0807d10351934912274736c53585a2336e28ac3751fcd938112bb99a7c0cc8f88970704f27cf42a86f883
-
SSDEEP
6144:A3LA82M9FW3xBd148dGl0BmWaSU+nkyzYs0ixy:A3LTQnd+kPas0s0
Malware Config
Signatures
Files
-
74969d361290f486c40239ffe10ca4feb2582a88142a655a73d743006ee34458.exe windows x86
ba9e101c295fec5b4a00a163902edff8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
DeviceIoControl
OpenMutexA
VirtualProtectEx
GetDriveTypeA
lstrlenA
LoadLibraryA
GetCurrentProcess
LocalLock
HeapFree
GetStringTypeA
DeleteFileA
GetPrivateProfileSectionA
GetCurrentThread
GetFileAttributesA
CreateEventW
FindVolumeClose
DeviceIoControl
HeapDestroy
GetPrivateProfileIntW
CloseHandle
uxtheme
SetWindowTheme
DrawThemeEdge
GetThemeSysSize
GetThemeBool
CloseThemeData
GetThemeTextMetrics
CloseThemeData
GetWindowTheme
DrawThemeBackground
GetThemeColor
OpenThemeData
IsThemeActive
GetThemeTextExtent
odbccp32
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ