Static task
static1
Behavioral task
behavioral1
Sample
597f8014ace3d84f9f7935d83690d255dc6b78cd826b861efcf1e6243ee722d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
597f8014ace3d84f9f7935d83690d255dc6b78cd826b861efcf1e6243ee722d9.exe
Resource
win10v2004-20220812-en
General
-
Target
597f8014ace3d84f9f7935d83690d255dc6b78cd826b861efcf1e6243ee722d9
-
Size
304KB
-
MD5
700e6b17ae90b27bd6b3bb9579589630
-
SHA1
2ef60e56f757f9a945a72f85c239a2198c5047b3
-
SHA256
597f8014ace3d84f9f7935d83690d255dc6b78cd826b861efcf1e6243ee722d9
-
SHA512
e131db3efb609b819dd260cbab0457467e34587d966d6aef641ef61e1c69b2c65d6eaf14bdace62a6c3c54bb3f45ca415858530ee6177ecef207e0b10ca91d37
-
SSDEEP
6144:BgmYsNUaXDRKz8ehQTSrCI0Zv/DSwgmA5pc78jPIrrvHbQik+mplPymF:B9FN7XIAehQW0Zv7XD8jAHvH8f5pcY
Malware Config
Signatures
Files
-
597f8014ace3d84f9f7935d83690d255dc6b78cd826b861efcf1e6243ee722d9.exe windows x86
e519d0ab55fbf7aa37e65e53cf9ef6d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
GetModuleHandleA
GlobalLock
TlsGetValue
GetFileAttributesW
GetCurrentThread
HeapFree
GetCurrentProcess
SetLastError
GetLocaleInfoW
SetCommBreak
CreateDirectoryW
FindClose
LocalFlags
GetFileAttributesW
DeviceIoControl
CreateEventA
GetVersionExA
GetStringTypeA
VirtualProtectEx
RemoveDirectoryW
user32
PeekMessageW
GetWindowTextW
DispatchMessageA
IsDialogMessageA
wsprintfW
DefDlgProcA
SetCursorPos
SetCursor
SetFocus
PostMessageW
GetWindowLongW
LoadCursorA
IsWindow
msorcl32
SQLError
SQLCancel
SQLConnect
SQLDisconnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE