Static task
static1
Behavioral task
behavioral1
Sample
1c4336ce39091d1f577222aa5fea1cf7649b17d1d015936a7abf405ba91744fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c4336ce39091d1f577222aa5fea1cf7649b17d1d015936a7abf405ba91744fe.exe
Resource
win10v2004-20220812-en
General
-
Target
1c4336ce39091d1f577222aa5fea1cf7649b17d1d015936a7abf405ba91744fe
-
Size
304KB
-
MD5
643975abeafa5e0c719371dcd027bbd0
-
SHA1
1a788c346ec67acb41475e30386a65e2768ca7d5
-
SHA256
1c4336ce39091d1f577222aa5fea1cf7649b17d1d015936a7abf405ba91744fe
-
SHA512
d8338580dd14a21bd3e755e8aeacbfe1d156e449040a8544354f491805bcf84298543048ae932a6c131155365aba7d205ef7711ce68baabbed95e5897dff9c7e
-
SSDEEP
6144:jgmYsNy98ehs0/BtPxSMvUtFPIcwwhWr+dNASdOlA2BEl4g:j9FNy98gs0ptvM3PIcPaQZa
Malware Config
Signatures
Files
-
1c4336ce39091d1f577222aa5fea1cf7649b17d1d015936a7abf405ba91744fe.exe windows x86
33e4eec6465d6b31ff868c79d4b8890a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetFileAttributesW
HeapFree
GetPrivateProfileSectionA
SetCommBreak
GlobalLock
GetFileAttributesW
GetCurrentProcess
CreateDirectoryW
GetModuleHandleA
LocalFlags
RemoveDirectoryW
GetVersionExA
VirtualProtectEx
GetStringTypeA
GetPrivateProfileIntA
FindClose
DeviceIoControl
CloseHandle
GetCurrentThread
CreateEventA
user32
IsWindow
SetCursorPos
DefDlgProcA
GetWindowLongW
PeekMessageW
LoadCursorA
IsDialogMessageA
GetWindowTextW
DispatchMessageA
IsZoomed
wsprintfW
PostMessageW
SetFocus
msorcl32
SQLCancel
SQLError
SQLConnect
SQLDisconnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE