Static task
static1
Behavioral task
behavioral1
Sample
3e34c4a312108c89977fa9d8b38f13601875494fa9cb87f44bdeb20d8b159902.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e34c4a312108c89977fa9d8b38f13601875494fa9cb87f44bdeb20d8b159902.exe
Resource
win10v2004-20220812-en
General
-
Target
3e34c4a312108c89977fa9d8b38f13601875494fa9cb87f44bdeb20d8b159902
-
Size
122KB
-
MD5
64c2af9360eb33c1f42b3ad4b4a562aa
-
SHA1
d7d542646a592d8fb6835f4ba3fae19539eae1b6
-
SHA256
3e34c4a312108c89977fa9d8b38f13601875494fa9cb87f44bdeb20d8b159902
-
SHA512
c2eec0d7d51e44dde7dd78c1e05aea00782a83edb87f33a67b65c8bf46258c15d9a289970c9d8fc42ffeecbe723fa80511dad535eb9edf0985c1663ec589a74c
-
SSDEEP
3072:rZCHpraXtIIPboDQbhce3cMNTZ4tZAvx:9CJKWIPboChcKcMNetZAp
Malware Config
Signatures
Files
-
3e34c4a312108c89977fa9d8b38f13601875494fa9cb87f44bdeb20d8b159902.exe windows x86
6e321d0fbeb0a6534c553610430a6cb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetFileAttributesW
GetStringTypeA
TlsGetValue
RemoveDirectoryW
VirtualProtectEx
SetCommBreak
DeviceIoControl
GetFileAttributesW
GetCurrentProcess
CreateEventA
CreateDirectoryW
GetPrivateProfileSectionA
LocalFlags
FindClose
SetLastError
GetLocaleInfoW
GetVersionExA
GetModuleHandleA
GlobalLock
GetCurrentThread
user32
SetCursor
PostMessageW
SetCursorPos
GetWindowLongW
IsWindow
wsprintfW
GetWindowTextW
DefDlgProcA
IsDialogMessageA
SetFocus
LoadCursorA
PeekMessageW
DispatchMessageA
msorcl32
SQLCancel
SQLError
SQLConnect
SQLDisconnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE