Static task
static1
Behavioral task
behavioral1
Sample
7a61a410753b0c216572aae13726c3acc6c2f9301563d9d4e801bda035c7b7fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a61a410753b0c216572aae13726c3acc6c2f9301563d9d4e801bda035c7b7fd.exe
Resource
win10v2004-20221111-en
General
-
Target
7a61a410753b0c216572aae13726c3acc6c2f9301563d9d4e801bda035c7b7fd
-
Size
430KB
-
MD5
36500f68353664e1f0310ee94ce8abc3
-
SHA1
29abbc4aac45f827b6cdb6a9098f256d87f760eb
-
SHA256
7a61a410753b0c216572aae13726c3acc6c2f9301563d9d4e801bda035c7b7fd
-
SHA512
a8996da8862a2684deb056f1019f868a13b4c0dd45ade3129134a5530b82c31849bb2e0d1be8f3a52b721826991540fdf8a31e4d256ffdd4b66050ba47cfb0f5
-
SSDEEP
12288:aLnrWWnj7ei7Mb17WUBDeze+XTmaPM+iNPmAu:aLrjj7ei7Mb17OK+/MHPmA
Malware Config
Signatures
Files
-
7a61a410753b0c216572aae13726c3acc6c2f9301563d9d4e801bda035c7b7fd.exe windows x86
3a14c2e9bf3400e290f3d45bb1486a8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
odbc32
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
onex
OneXAddEapAttributes
OneXAddTLV
msvcrt
fread
fopen
icm32
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMCheckColors
CMCheckColorsInGamut
CMGetNamedProfileInfo
CMCreateTransformExtW
CMCreateTransformExt
CMCreateProfile
kernel32
QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetACP
LocalFlags
LockResource
LocalCompact
GetWindowsDirectoryA
perfctrs
CloseDhcpPerformanceData
imm32
ImmEscapeA
mscms
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
aclui
CreateSecurityPage
EditSecurity
msdart
??1CCritSec@@QAE@XZ
??1CCritSec@@QAE@XZ
Sections
code Size: 2KB - Virtual size: 6KB
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 414KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 496B
IMAGE_SCN_MEM_READ