Static task
static1
Behavioral task
behavioral1
Sample
fe3639475a6a8141418d07a61d235aa738be5341a2d7e3582a5e9c9b4bb262a3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe3639475a6a8141418d07a61d235aa738be5341a2d7e3582a5e9c9b4bb262a3.exe
Resource
win10v2004-20220901-en
General
-
Target
fe3639475a6a8141418d07a61d235aa738be5341a2d7e3582a5e9c9b4bb262a3
-
Size
309KB
-
MD5
19aac6490ecdc74f1af83bacaf0810d0
-
SHA1
04b93ec01bb8f7b1e36fed0fa2cb5c65460cfa41
-
SHA256
fe3639475a6a8141418d07a61d235aa738be5341a2d7e3582a5e9c9b4bb262a3
-
SHA512
786cf90ae44ff40b15062e6a522b536e979b77c123ebbc3e6db68dc575cea7063121cb0f7e4b7533c143ea3ec05bf6312a9f4ee076e559e50da505b56025038b
-
SSDEEP
6144:JmLQd0IIrTJlyXf6QyGPei+3YrIqsg7myA7zXhlVx3vMCSkJ6B8qxE:8L+0IIZVGmi+3Y0qVayo/f3vXSRt
Malware Config
Signatures
Files
-
fe3639475a6a8141418d07a61d235aa738be5341a2d7e3582a5e9c9b4bb262a3.exe windows x86
15a872ea3281da33eefcc28f7340c363
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
GetCurrentProcess
TlsGetValue
DeleteFileA
LoadLibraryA
OpenMutexA
ClearCommBreak
CancelIo
DeviceIoControl
HeapDestroy
GetFileAttributesA
HeapFree
VirtualProtectEx
FindVolumeClose
GetPrivateProfileSectionA
CreateEventW
lstrlenA
GetTickCount
GetDriveTypeA
GetStringTypeA
GetPrivateProfileIntW
uxtheme
CloseThemeData
SetWindowTheme
CloseThemeData
GetThemeColor
IsThemeActive
GetThemeTextMetrics
GetThemeTextExtent
OpenThemeData
GetThemeSysSize
DrawThemeEdge
GetThemeBool
GetWindowTheme
DrawThemeBackground
odbccp32
SQLInstallDriver
SQLConfigDataSource
SQLInstallODBC
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ