Static task
static1
Behavioral task
behavioral1
Sample
1245940e18835a3ad194a624f4256e98573a490b5569b1c10610639994289a30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1245940e18835a3ad194a624f4256e98573a490b5569b1c10610639994289a30.exe
Resource
win10v2004-20220812-en
General
-
Target
1245940e18835a3ad194a624f4256e98573a490b5569b1c10610639994289a30
-
Size
312KB
-
MD5
57bf94bd45ee2258741b40a45b650b50
-
SHA1
2ed169a28c3941187958ae47d0707b94ff0feb0c
-
SHA256
1245940e18835a3ad194a624f4256e98573a490b5569b1c10610639994289a30
-
SHA512
2b3fb0febfa935cf6a2d4debddb4ce24ae717d557f38148354fec45dbfcced43edd3e4c381e473cf93871dbb79d473ece50a4a0e0441570b1440a78278b58d28
-
SSDEEP
6144:XrdLH09uLs3eqZ2tg/7Stm8hrsWFGOD63JIsU:JLH0wL8epy8hIiD63P
Malware Config
Signatures
Files
-
1245940e18835a3ad194a624f4256e98573a490b5569b1c10610639994289a30.exe windows x86
71db149ce793a179b602f49dcf25e4da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindVolumeClose
GetPrivateProfileSectionA
LoadLibraryA
lstrlenA
GetDriveTypeA
LocalLock
HeapDestroy
CloseHandle
GetStringTypeA
DeleteFileA
GetFileAttributesA
DeviceIoControl
OpenMutexA
VirtualProtectEx
GetStdHandle
GetCurrentProcess
HeapFree
CreateEventW
DeviceIoControl
GetPrivateProfileIntW
GetCurrentThread
shell32
SHGetMalloc
SHFree
StrChrA
DragQueryFileA
DllUnregisterServer
ShellMessageBoxA
ShellAboutA
DragAcceptFiles
DragFinish
SHGetMalloc
ExtractIconA
SHGetSettings
DuplicateIcon
odbccp32
SQLInstallODBC
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ