Static task
static1
Behavioral task
behavioral1
Sample
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe
Resource
win10v2004-20220812-en
General
-
Target
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8
-
Size
44KB
-
MD5
31dabfa8c23572ddc6eab605a31bd6ab
-
SHA1
a668e0a7cc5c0210c01eccb3d1e84da39a670680
-
SHA256
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8
-
SHA512
3a9c728f56fc4880e912c7c4d5605baf12d4822f6d06997a382fff58626119b9297cc25af5a1807a0b814c176a33ca7e20e5bbc65a4d39add376d9460b3abdf3
-
SSDEEP
768:3/brzGi4zjT1mAUK12YF8rm12Cri5IoZSAzcwf3MveTdX9y2YFcRsUl/:3/r4zn1BUa2YFam12Cu5IoZSAzcwf3M4
Malware Config
Signatures
Files
-
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe windows x86
3a14c2e9bf3400e290f3d45bb1486a8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
odbc32
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
onex
OneXAddEapAttributes
OneXAddTLV
msvcrt
fread
fopen
icm32
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMCheckColors
CMCheckColorsInGamut
CMGetNamedProfileInfo
CMCreateTransformExtW
CMCreateTransformExt
CMCreateProfile
kernel32
QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetACP
LocalFlags
LockResource
LocalCompact
GetWindowsDirectoryA
perfctrs
CloseDhcpPerformanceData
imm32
ImmEscapeA
mscms
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
aclui
CreateSecurityPage
EditSecurity
msdart
??1CCritSec@@QAE@XZ
??1CCritSec@@QAE@XZ
Sections
code Size: 2KB - Virtual size: 6KB
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 496B
IMAGE_SCN_MEM_READ