Static task
static1
Behavioral task
behavioral1
Sample
01a04e13d78822334b4fc91b1588a82175bf4b6c250691bb306012aa308fa0d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01a04e13d78822334b4fc91b1588a82175bf4b6c250691bb306012aa308fa0d3.exe
Resource
win10v2004-20221111-en
General
-
Target
01a04e13d78822334b4fc91b1588a82175bf4b6c250691bb306012aa308fa0d3
-
Size
44KB
-
MD5
68b6ca090bcd0a854bd896393240a906
-
SHA1
a76c254d4e711afa17bf120b865b038506ab5ccc
-
SHA256
01a04e13d78822334b4fc91b1588a82175bf4b6c250691bb306012aa308fa0d3
-
SHA512
5cac34bf2fa57535c2b4e06238ac9c070ed68dbe69f4d66bb9ba546eac00599b1b346fbf0ea77b5f68e7c42d997ffaaf0de6fcb5c4ba7067e3cfe9f0bd4a70e8
-
SSDEEP
768:WxF65qGawMFeXGQBQHOuCri5IoZSAzcwf3MveTdX9y2YFcRsUz:K65CJESZCu5IoZSAzcwf3MveTdXM2ach
Malware Config
Signatures
Files
-
01a04e13d78822334b4fc91b1588a82175bf4b6c250691bb306012aa308fa0d3.exe windows x86
0479f557e645f57ce3c718495ece9ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
odbc32
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
mpr
WNetGetLastErrorA
WNetGetLastErrorW
msvcrt
fread
fopen
icm32
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMCheckColors
CMCheckColorsInGamut
CMGetNamedProfileInfo
CMCreateTransformExtW
CMCreateTransformExt
CMCreateProfile
kernel32
QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetACP
LocalFlags
LockResource
LocalCompact
GetWindowsDirectoryA
perfctrs
CloseDhcpPerformanceData
imm32
ImmEscapeA
mfcsubs
??1CObject@@UAE@XZ
??1CString@@QAE@XZ
??1CStringArray@@UAE@XZ
??1CSyncObject@@UAE@XZ
??4CPlex@@QAEAAU0@ABU0@@Z
??4CString@@QAEABV0@ABV0@@Z
??4CString@@QAEABV0@D@Z
??4CString@@QAEABV0@G@Z
??4CString@@QAEABV0@PBD@Z
??4CString@@QAEABV0@PBE@Z
??4CString@@QAEABV0@PBG@Z
??8@YG_NABVCString@@0@Z
??8@YG_NABVCString@@PBG@Z
??8@YG_NPBGABVCString@@@Z
??9@YG_NABVCString@@0@Z
??9@YG_NABVCString@@PBG@Z
??9@YG_NPBGABVCString@@@Z
aclui
CreateSecurityPage
EditSecurity
msdart
??1CCritSec@@QAE@XZ
??1CCritSec@@QAE@XZ
mscms
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
Sections
.code Size: 2KB - Virtual size: 10KB
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 496B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE