Static task
static1
Behavioral task
behavioral1
Sample
8a7d79c6a746ee467cb53549620d46d94c5e5eea972df4771cfc698ca540b1c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8a7d79c6a746ee467cb53549620d46d94c5e5eea972df4771cfc698ca540b1c5.exe
Resource
win10v2004-20220812-en
General
-
Target
8a7d79c6a746ee467cb53549620d46d94c5e5eea972df4771cfc698ca540b1c5
-
Size
309KB
-
MD5
4e487c514965da9e168c80160abe9fd0
-
SHA1
c4609a4b173d8dc01eb1e1bf1ca1a9fb52bed6f4
-
SHA256
8a7d79c6a746ee467cb53549620d46d94c5e5eea972df4771cfc698ca540b1c5
-
SHA512
9aafa0b5cec2f70de76edf137e91123090ed894cbd9b9820d556e88a50a54d53c9205bc790df4ed654266d550bdbbdb99f9d75c6e2fb488e526934482e5649da
-
SSDEEP
6144:ZVppgmYsNyzEwHZ4DB8DbWQmnApLm7lSngGH5GAUDiIT3Vs:ZVL9FNdbl8DbW/nApSlSngU5GAGi0
Malware Config
Signatures
Files
-
8a7d79c6a746ee467cb53549620d46d94c5e5eea972df4771cfc698ca540b1c5.exe windows x86
f6afa4cafed425fd1e76b82c8ce84509
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVersionExA
DeviceIoControl
VirtualProtectEx
GetModuleHandleA
GetPrivateProfileSectionA
SetLastError
GetStringTypeA
RemoveDirectoryW
GetPrivateProfileIntA
SetCommBreak
HeapFree
GetFileAttributesW
FindClose
LocalFlags
GetFileAttributesW
GetCurrentProcess
GlobalLock
CloseHandle
CreateEventA
CreateDirectoryW
GetCurrentThread
user32
DispatchMessageA
IsWindow
SetCursorPos
IsZoomed
SetFocus
LoadCursorA
PostMessageW
DefDlgProcW
GetWindowTextW
PeekMessageW
IsDialogMessageA
GetWindowLongW
wsprintfW
msorcl32
SQLDisconnect
SQLConnect
SQLError
SQLCancel
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ