Static task
static1
Behavioral task
behavioral1
Sample
24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2.exe
Resource
win10v2004-20220414-en
General
-
Target
24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2
-
Size
304KB
-
MD5
5216bf5213f2f94e756ce464d34c740c
-
SHA1
dd3ad086b2973e67e41aa21680448badb989f9c5
-
SHA256
24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2
-
SHA512
e3a135872883db3204d9f3c15bd035b2d13d51bc342a1a690e7111cd1f2d613d4832de446d01e18b8a9cd11abf1329400a4329a8a002c535233b9369bf503e95
-
SSDEEP
6144:PmCqKd3GiT0oedP1Tm6jkT4PYrxY6nbg4E0:+4d3GiT0oed9TR6NY6n7E
Malware Config
Signatures
Files
-
24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2.exe windows x86
fe75c87171438aa6f4815dab6616909b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PeekMessageW
wsprintfW
GetClassLongA
InsertMenuW
CharUpperA
DrawStateW
PostMessageA
LoadMenuW
DialogBoxParamA
GetDlgItemTextA
LoadCursorW
advapi32
RegDeleteKeyW
OpenServiceA
RegLoadKeyW
RegCreateKeyExA
RegSaveKeyW
RegReplaceKeyW
LogonUserW
RegUnLoadKeyW
RegDeleteValueA
ClearEventLogA
kernel32
lstrcmpiA
GetCommandLineW
FileTimeToLocalFileTime
ReadConsoleA
GetEnvironmentVariableA
GetConsoleTitleA
FindFirstFileA
LoadLibraryA
GetFileSize
WaitForSingleObject
GetProcAddress
FindClose
GlobalAddAtomW
CreateMutexA
GetModuleHandleA
FindNextFileW
DefineDosDeviceA
odbctrac
TraceSQLFetch
TraceSQLConnect
TraceSQLError
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rlc Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ