Static task
static1
Behavioral task
behavioral1
Sample
ca814954c6adf09dd7721de7f65d343142a2f03abde1d984a0686e40e54b0461.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca814954c6adf09dd7721de7f65d343142a2f03abde1d984a0686e40e54b0461.exe
Resource
win10v2004-20220812-en
General
-
Target
ca814954c6adf09dd7721de7f65d343142a2f03abde1d984a0686e40e54b0461
-
Size
309KB
-
MD5
4b3cde9a1d0e4e64aede4a781a6c2910
-
SHA1
501767eb5f4f7a9aaef4284f2489c8213d7927a4
-
SHA256
ca814954c6adf09dd7721de7f65d343142a2f03abde1d984a0686e40e54b0461
-
SHA512
9cb9c94359a19ad747bb7f2cb716d29b88ac41a4ea28394f7b9d803340e915000c58210d3e508e5ddf0004eac721037c1c563ac8b2b2d602e15363ac04b78709
-
SSDEEP
6144:PgmYsNmUtb976RsQL8NbKXpHpUcPtGjDK6rTR+/XLxEOAwGZQBzpx:P9FNXbkGy8Nb+JD12DK6x+/XLqOAwGZm
Malware Config
Signatures
Files
-
ca814954c6adf09dd7721de7f65d343142a2f03abde1d984a0686e40e54b0461.exe windows x86
ca44beae0ddc93ae28be562c3b339190
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
VirtualProtectEx
DeviceIoControl
RemoveDirectoryW
GetPrivateProfileSectionA
LocalFlags
GetCurrentThread
GetVersionExA
GetModuleHandleA
CloseHandle
SetLastError
CreateDirectoryW
GetStringTypeA
HeapFree
GetFileAttributesW
GetPrivateProfileIntA
GlobalLock
GetFileAttributesW
SetCommBreak
FindClose
CreateEventA
user32
PeekMessageW
PostMessageW
SetFocus
LoadCursorA
SetCursorPos
IsDialogMessageA
IsZoomed
wsprintfW
DispatchMessageA
GetWindowTextW
DefDlgProcW
IsWindow
GetWindowLongW
msorcl32
SQLConnect
SQLDisconnect
SQLCancel
SQLError
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ