Static task
static1
Behavioral task
behavioral1
Sample
5ece7e959a8e72dd42a66c9f508d4b88b98663e72ca67914bf38fd08d9be30b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ece7e959a8e72dd42a66c9f508d4b88b98663e72ca67914bf38fd08d9be30b9.exe
Resource
win10v2004-20220901-en
General
-
Target
5ece7e959a8e72dd42a66c9f508d4b88b98663e72ca67914bf38fd08d9be30b9
-
Size
407KB
-
MD5
675b3e21695055efe2dd3e4508abf0b0
-
SHA1
ae44153f57a7c4fa969157761a15d87c92cbdb6a
-
SHA256
5ece7e959a8e72dd42a66c9f508d4b88b98663e72ca67914bf38fd08d9be30b9
-
SHA512
1d77d883f1ec0e65158c0f74baf5330ca4c77158b8a435169b9a73dfa6be0639ba276deff3d30d53932b756e66ebe6dadb5faf4e87480402daddbfe254e2324d
-
SSDEEP
6144:3WUtzXCoYdGQxGOENlsV+WSRtTMh3LN0sC2alTjCO+9kjJJJjHfWvAliFJmh:3WUJXCzxesV4to1N0s8k9UL1fWjCh
Malware Config
Signatures
Files
-
5ece7e959a8e72dd42a66c9f508d4b88b98663e72ca67914bf38fd08d9be30b9.exe windows x86
2dff5f15f92228abdf91c3910953c473
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetVersionExA
GlobalLock
FindClose
CreateEventA
LocalFlags
VirtualProtectEx
GetCurrentThread
SetLastError
GetPrivateProfileIntA
GetFileAttributesW
SetCommBreak
DeviceIoControl
CloseHandle
GetCurrentProcess
RemoveDirectoryW
CreateDirectoryW
GetPrivateProfileSectionA
GetFileAttributesW
GetStringTypeA
GetModuleHandleA
user32
GetWindowLongW
wsprintfW
SetFocus
IsWindow
PostMessageW
GetWindowTextW
DispatchMessageA
PeekMessageW
DefDlgProcW
IsZoomed
LoadCursorA
IsDialogMessageA
SetCursorPos
msorcl32
SQLCancel
SQLDisconnect
SQLConnect
SQLError
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ