Static task
static1
Behavioral task
behavioral1
Sample
db9427f12579f4c3b7791f78c246bfba073e0a722eed8e45660f1e5af84535d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db9427f12579f4c3b7791f78c246bfba073e0a722eed8e45660f1e5af84535d9.exe
Resource
win10v2004-20220812-en
General
-
Target
db9427f12579f4c3b7791f78c246bfba073e0a722eed8e45660f1e5af84535d9
-
Size
270KB
-
MD5
04c10ab477b854e8e3aeb9e8250a2283
-
SHA1
09442f1e5a9afac13638e99ef0cb599db0704690
-
SHA256
db9427f12579f4c3b7791f78c246bfba073e0a722eed8e45660f1e5af84535d9
-
SHA512
d4e9c8fd1bcc9443a3dee71223efcec585b444406f7fb7e7414348bee0b41f69eaf4f0e4c4ae47eb26e0a7ff460c1d2d6b1020a4a834312ec564dc7c85f54ba4
-
SSDEEP
6144:s7X5gbFcV18bBrjNCvikqcK2ikzzP+8OHZ4MV94ReC0zMLFX:saFEI0vikqlkzb+8O5xnQeC0zMLB
Malware Config
Signatures
Files
-
db9427f12579f4c3b7791f78c246bfba073e0a722eed8e45660f1e5af84535d9.exe windows x86
ea0a2a03e4154abebb61feb90c915112
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mscms
GetCountColorProfileElements
GetNamedProfileInfo
InternalGetPS2ColorSpaceArray
GetColorDirectoryW
ConvertIndexToColorName
GetPS2ColorRenderingDictionary
CreateProfileFromLogColorSpaceA
RegisterCMMA
DisassociateColorProfileFromDeviceA
DisassociateColorProfileFromDeviceW
SetColorProfileElementSize
UnregisterCMMW
GetStandardColorSpaceProfileW
CreateColorTransformW
RegisterCMMW
InternalSetDeviceConfig
GetCMMInfo
GetPS2ColorSpaceArray
CreateDeviceLinkProfile
CreateMultiProfileTransform
OpenColorProfileA
GetPS2ColorRenderingIntent
GetColorProfileElement
SetColorProfileHeader
GenerateCopyFilePaths
GetColorProfileFromHandle
SetColorProfileElementReference
ConvertColorNameToIndex
AssociateColorProfileWithDeviceW
AssociateColorProfileWithDeviceA
EnumColorProfilesA
GetStandardColorSpaceProfileA
IsColorProfileTagPresent
SelectCMM
GetColorProfileHeader
GetColorProfileElementTag
UninstallColorProfileW
UnregisterCMMA
SpoolerCopyFileEvent
CheckColors
CreateProfileFromLogColorSpaceW
InternalGetPS2ColorRenderingDictionary
InstallColorProfileA
CheckBitmapBits
GetColorDirectoryA
InternalGetDeviceConfig
OpenColorProfileW
InternalGetPS2CSAFromLCS
kernel32
DeleteCriticalSection
GetCurrentDirectoryW
LocalFree
GetDiskFreeSpaceExW
SetLastError
SetErrorMode
WideCharToMultiByte
GetSystemTimeAsFileTime
HeapAlloc
GetCurrentProcess
GetCurrentThreadId
GetSystemTime
GetFileInformationByHandle
FormatMessageW
GetLogicalDriveStringsW
SetTapeParameters
WritePrivateProfileStringW
SystemTimeToFileTime
GetPriorityClass
LocalFileTimeToFileTime
ReleaseMutex
SetFileAttributesW
FreeLibrary
EraseTape
ExitThread
GetTapeStatus
UnhandledExceptionFilter
LoadLibraryW
GetEnvironmentVariableW
FindVolumeMountPointClose
CloseHandle
ReleaseSemaphore
SetFileTime
GetProcAddress
GetCurrentDirectoryA
FindFirstFileW
LeaveCriticalSection
FindFirstVolumeMountPointW
Sleep
GetWindowsDirectoryW
MoveFileExW
GetExitCodeThread
FindClose
GetModuleFileNameW
TerminateThread
CompareStringW
GetVolumeNameForVolumeMountPointW
MultiByteToWideChar
SystemTimeToTzSpecificLocalTime
GetVersionExA
GetTimeFormatW
InitializeCriticalSection
SetCurrentDirectoryW
CloseHandle
GetFileSize
BackupSeek
EnterCriticalSection
GetNumberFormatW
SetPriorityClass
TerminateProcess
LocalFree
ReadFile
CreateSemaphoreW
GetPrivateProfileStringW
VirtualFree
BackupWrite
CreateEventW
GetFileAttributesW
DeleteFileW
GetLocaleInfoW
SetFileShortNameW
SetTapePosition
GetTickCount
GetVolumeInformationW
ExpandEnvironmentStringsW
GetComputerNameW
DeviceIoControl
BackupRead
CreateFileW
GlobalAlloc
VirtualAlloc
GetTapePosition
CreateThread
SetUnhandledExceptionFilter
LoadLibraryA
HeapFree
GetDateFormatW
FindNextVolumeMountPointW
CreateDirectoryW
RemoveDirectoryW
GetTimeZoneInformation
GetLastError
WriteFile
FileTimeToSystemTime
GlobalFree
GetStartupInfoW
VerifyVersionInfoW
SetEvent
CreateHardLinkW
GetSystemDirectoryW
CreateMutexW
SetEndOfFile
GetTickCount
VerSetConditionMask
GetLocalTime
msorcl32
SQLPrimaryKeys
SQLFetch
SQLPutData
SQLSetPos
SQLRowCount
SQLGetTypeInfo
SQLCancel
SQLForeignKeys
SQLConnect
SQLTables
SQLGetCursorName
SQLNativeSql
SQLProcedures
SQLColAttributes
ConfigDSN
SQLExecute
SQLSetScrollOptions
SQLSetConnectOption
SQLBrowseConnect
SQLAllocConnect
DllMain
SQLDescribeCol
DllUnregisterServer
SQLFreeStmt
SQLPrepare
SQLGetStmtOption
SQLExtendedFetch
SQLColumns
SQLNumResultCols
SQLMoreResults
SQLNumParams
SQLTransact
SQLStatistics
SQLDisconnect
SQLAllocEnv
LoadByOrdinal
SQLFreeEnv
SQLFreeConnect
SQLSpecialColumns
SQLError
SQLDescribeParam
SQLExecDirect
SQLGetInfo
SQLBindCol
SQLDriverConnect
SQLSetCursorName
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ