Static task
static1
Behavioral task
behavioral1
Sample
859c1f43f40138a3d23171f7ae677452a7d673c840ec0fa32d31c5957f773c1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
859c1f43f40138a3d23171f7ae677452a7d673c840ec0fa32d31c5957f773c1e.exe
Resource
win10v2004-20220812-en
General
-
Target
859c1f43f40138a3d23171f7ae677452a7d673c840ec0fa32d31c5957f773c1e
-
Size
310KB
-
MD5
641946de0a431455a7e2fcd39d55dda0
-
SHA1
f5425f567696a52ebe2a098653afc95d6099b699
-
SHA256
859c1f43f40138a3d23171f7ae677452a7d673c840ec0fa32d31c5957f773c1e
-
SHA512
0c6a0b6ea2c2149fbeb43e91263f04007455e589cb80a86a250ba8d1fbf4d2ad61e8d12d4a151dca8e3b75b23ae9f6ac9f0f7a807f5388bc963258a2ca2f7133
-
SSDEEP
6144:IJ3PLjdUChsbQeX7/J5DdaHiDQm8CJzcDncnPIcgb2MOgG:cLOChNQ/JFU6H8CJSnz7SM1G
Malware Config
Signatures
Files
-
859c1f43f40138a3d23171f7ae677452a7d673c840ec0fa32d31c5957f773c1e.exe windows x86
e0605ed09df255c4d7f842ad514b5e24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetCurrentThread
LoadLibraryA
DeleteFileA
LocalLock
OpenMutexA
lstrlenA
GetPrivateProfileSectionA
FindVolumeClose
GetCurrentProcess
GetVersionExW
CreateEventW
GetDriveTypeA
HeapDestroy
CloseHandle
GetStringTypeA
GetStdHandle
VirtualProtectEx
GetFileAttributesA
DeviceIoControl
GetPrivateProfileIntW
shell32
DllUnregisterServer
SHGetMalloc
DragAcceptFiles
SHFree
DuplicateIcon
ShellMessageBoxA
StrChrA
SHGetMalloc
ShellAboutA
DragQueryFileA
ExtractIconA
DragFinish
SHGetSettings
odbccp32
SQLInstallODBC
SQLGetAvailableDrivers
SQLConfigDataSource
SQLInstallDriver
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ