Static task
static1
Behavioral task
behavioral1
Sample
df9c3099dfb96c95d7bf6784548d292037fd9d5bfdf3f613320b1804bddec7bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df9c3099dfb96c95d7bf6784548d292037fd9d5bfdf3f613320b1804bddec7bd.exe
Resource
win10v2004-20220812-en
General
-
Target
df9c3099dfb96c95d7bf6784548d292037fd9d5bfdf3f613320b1804bddec7bd
-
Size
126KB
-
MD5
74b1829ed9297e1c3b0b8d4f41562690
-
SHA1
1dd11d354af9ed25c4529c28dc7ba4a1a8f3ab97
-
SHA256
df9c3099dfb96c95d7bf6784548d292037fd9d5bfdf3f613320b1804bddec7bd
-
SHA512
9b8ceb6c9691f1790f8b6090815dd29aee877e83c14551d4badf1a99cb49ed88386e8044e253f92f713a3d8d7467fc5a1fa99c80d3236da2d59215e4a638a324
-
SSDEEP
3072:PAk8K4Od5DluGD15Scz5kJl/kgd9hcXD6Zz:r8c9lXHz5kXDeD4z
Malware Config
Signatures
Files
-
df9c3099dfb96c95d7bf6784548d292037fd9d5bfdf3f613320b1804bddec7bd.exe windows x86
4c72c94ce29f13ae9d4b7b0241e6c2c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindClose
GetModuleHandleA
CreateDirectoryW
CreateEventA
RemoveDirectoryW
SetLastError
GetVersionExA
GetLocaleInfoW
GetFileAttributesW
SetCommBreak
DeviceIoControl
GetPrivateProfileSectionA
LocalFlags
HeapFree
GetStringTypeA
GetCurrentThread
VirtualProtectEx
GlobalLock
GetCurrentProcess
TlsGetValue
GetFileAttributesW
user32
SetCursor
DefDlgProcA
SetFocus
PostMessageW
DispatchMessageA
GetWindowTextW
IsWindow
GetWindowLongW
wsprintfW
PeekMessageW
IsDialogMessageA
LoadCursorA
SetCursorPos
msorcl32
SQLError
SQLConnect
SQLDisconnect
SQLCancel
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE