Static task
static1
Behavioral task
behavioral1
Sample
709b2ff4e9dccc6d6d827192b3de0c853da49c04f705660e542ad433be0bc869.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
709b2ff4e9dccc6d6d827192b3de0c853da49c04f705660e542ad433be0bc869.exe
Resource
win10v2004-20220812-en
General
-
Target
709b2ff4e9dccc6d6d827192b3de0c853da49c04f705660e542ad433be0bc869
-
Size
310KB
-
MD5
66c1b8db2feed33a1687b7bc21487e06
-
SHA1
0264c20f1a2edac5a6dab3b39b010b9b3259ae5e
-
SHA256
709b2ff4e9dccc6d6d827192b3de0c853da49c04f705660e542ad433be0bc869
-
SHA512
2555d339bf3db1b01953ddcdcb35d6238dad134928e73f70160781be1ab468f20c68c2afd91b1f36068a105e8bbbcdace2f709cd50cd93fd065069a80eaff668
-
SSDEEP
6144:nMlLeTqv0Fo10NSU4esDc49N+spKTvFcQQQr6d6Z9tpy:QLemv6o10rDsDc49N+spIv5QQr6d6Z
Malware Config
Signatures
Files
-
709b2ff4e9dccc6d6d827192b3de0c853da49c04f705660e542ad433be0bc869.exe windows x86
7e47efceb5d394496ac6e63960005b8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
OpenMutexA
GetCurrentThread
GetVersionExW
FindVolumeClose
GetFileAttributesA
LoadLibraryA
GetStringTypeA
lstrlenA
VirtualProtectEx
GetPrivateProfileIntW
LocalLock
GetStdHandle
GetCurrentProcess
DeleteFileA
HeapFree
HeapDestroy
CloseHandle
GetDriveTypeA
DeviceIoControl
CreateEventW
shell32
ExtractIconA
ShellAboutA
SHGetMalloc
SHGetSettings
SHGetMalloc
DragAcceptFiles
SHFree
DuplicateIcon
ShellMessageBoxA
StrChrA
DllUnregisterServer
DragQueryFileA
DragFinish
odbccp32
SQLConfigDataSource
SQLInstallODBC
SQLGetAvailableDrivers
SQLInstallDriver
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ