Static task
static1
Behavioral task
behavioral1
Sample
573ccc7f69afb0fa0d53b19b44a46de73a49dff0239a122d457f4e55a4961c09.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
573ccc7f69afb0fa0d53b19b44a46de73a49dff0239a122d457f4e55a4961c09.exe
Resource
win10v2004-20220721-en
General
-
Target
573ccc7f69afb0fa0d53b19b44a46de73a49dff0239a122d457f4e55a4961c09
-
Size
108KB
-
MD5
75d4f22da8952b9c6e8c82f72bfedfea
-
SHA1
95983ed45f7bd53399fb20e54a547308a2f9e9e4
-
SHA256
573ccc7f69afb0fa0d53b19b44a46de73a49dff0239a122d457f4e55a4961c09
-
SHA512
e6b945e7c5fc7259690435e780232bb6ffc3b4fd37f2cc9b6f0a7a4c6b9a175e8d84e7997454a0c11cfb44fb78863920191ed3633cee23baaa29f3ea0db0cec3
-
SSDEEP
1536:h1IsBND4AEHmRGj3ILt5XVVOxjjeQCstGZH9o16yndYCCnXTx4wrIxBD9DMiesGm:DoMLXVUp/o5ycUdYrX94w8xB6j0/
Malware Config
Signatures
Files
-
573ccc7f69afb0fa0d53b19b44a46de73a49dff0239a122d457f4e55a4961c09.exe windows x86
7a6eb5ff5eb19396cef1ec3e147117b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetTickCount
GetVolumeNameForVolumeMountPointW
OpenEventA
CreateMailslotW
ExitThread
DeleteFileW
WriteFile
LoadLibraryExW
CreateSemaphoreW
VirtualAllocEx
InterlockedIncrement
LoadLibraryA
CreateFileMappingA
WriteConsoleW
MoveFileA
AddAtomA
CreateFileW
SetLastError
FindAtomA
WaitForSingleObjectEx
certcli
CAEnumNextCA
CADeleteCA
odbctrac
TraceSQLError
TraceSQLConnect
TraceSQLFetch
TraceSQLCancel
TraceSQLBindCol
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE