Static task
static1
Behavioral task
behavioral1
Sample
1fe810e61a0828190ea6bc9f55b91eaa2ee86af1c8747bd0889ce8992f334b88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1fe810e61a0828190ea6bc9f55b91eaa2ee86af1c8747bd0889ce8992f334b88.exe
Resource
win10v2004-20220812-en
General
-
Target
1fe810e61a0828190ea6bc9f55b91eaa2ee86af1c8747bd0889ce8992f334b88
-
Size
304KB
-
MD5
45a3b88784c119468f7f7d4ecdc169f8
-
SHA1
3682161f2442af050c11a9114d3cb23e30e28959
-
SHA256
1fe810e61a0828190ea6bc9f55b91eaa2ee86af1c8747bd0889ce8992f334b88
-
SHA512
757bc12676043c267d777930a0b81b3d0d0adb1292b4f61e4e06b87b76cd531795349a11c0de4c748b95e37322eee43b4861862e3c03e7ed9fd97280b9c79790
-
SSDEEP
6144:59gmYsNFM8FWQq9R+UaO7cTV1Au0mLP6+d4OjawkQklN:599FNFMCWQmRRaOoT7J3d4Ak7
Malware Config
Signatures
Files
-
1fe810e61a0828190ea6bc9f55b91eaa2ee86af1c8747bd0889ce8992f334b88.exe windows x86
9d6df4283aa5fd3bade623f682cca107
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
SetCommBreak
CreateEventA
FindClose
RemoveDirectoryW
GetCurrentProcess
GlobalLock
DeviceIoControl
HeapFree
VirtualProtectEx
GetVersionExA
GetStringTypeA
GetCurrentThread
CreateDirectoryW
LocalFlags
GetPrivateProfileIntA
GetPrivateProfileSectionA
CloseHandle
GetModuleHandleA
GetFileAttributesW
SetLastError
user32
PostMessageW
PeekMessageW
DefDlgProcA
DispatchMessageA
IsZoomed
GetWindowLongW
LoadCursorA
IsDialogMessageA
IsWindow
SetFocus
wsprintfW
SetCursorPos
GetWindowTextW
msorcl32
SQLDisconnect
SQLConnect
SQLError
SQLCancel
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE