Static task
static1
Behavioral task
behavioral1
Sample
7263fc9747412702dfcb999943953eb40330d3c3cf47e5b00742b8f87e3f6faf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7263fc9747412702dfcb999943953eb40330d3c3cf47e5b00742b8f87e3f6faf.exe
Resource
win10v2004-20220812-en
General
-
Target
7263fc9747412702dfcb999943953eb40330d3c3cf47e5b00742b8f87e3f6faf
-
Size
126KB
-
MD5
6e40ca915445bc42ef2aa8ea1002e360
-
SHA1
7040ef6335de70a92ea1729f0427366adf778d31
-
SHA256
7263fc9747412702dfcb999943953eb40330d3c3cf47e5b00742b8f87e3f6faf
-
SHA512
9c97432f75d5c13d22238631de773222ca1c506466511cf615fbecbd85b9eeb4a8b6f90892f24fbe20e90a56c3df699524a33e8d8b7fb054fb040b17d6c51414
-
SSDEEP
1536:3sYW/eBbd6J7AnIw3R8hfiEKX9bzExo81ZlypmKaUc3YIHADZ54Mupd3XtKg4rDT:c/I3fX9b+1Z6Flcqoz4rVUnq
Malware Config
Signatures
Files
-
7263fc9747412702dfcb999943953eb40330d3c3cf47e5b00742b8f87e3f6faf.exe windows x86
e111481b77b5b14d511395d91be46bef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
GlobalLock
LocalFlags
VirtualProtectEx
GetLocaleInfoW
HeapFree
GetFileAttributesW
SetCommBreak
SetLastError
TlsGetValue
GetStringTypeA
FindClose
CreateDirectoryW
GetVersionExA
CreateEventA
GetPrivateProfileSectionA
GetFileAttributesW
RemoveDirectoryW
DeviceIoControl
GetModuleHandleA
GetCurrentThread
user32
GetWindowLongW
IsWindow
IsDialogMessageA
SetCursor
DispatchMessageA
DefDlgProcA
LoadCursorA
GetWindowTextW
wsprintfW
SetFocus
PostMessageW
SetCursorPos
PeekMessageW
msorcl32
SQLDisconnect
SQLConnect
SQLError
SQLCancel
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE