Static task
static1
Behavioral task
behavioral1
Sample
1587565084b081d6f1cd0eeafecf57cf9faf47be650242417b82624704bc2eab.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1587565084b081d6f1cd0eeafecf57cf9faf47be650242417b82624704bc2eab.exe
Resource
win10v2004-20220812-en
General
-
Target
1587565084b081d6f1cd0eeafecf57cf9faf47be650242417b82624704bc2eab
-
Size
309KB
-
MD5
6462bdae4bcb0470fe59c909c66ade30
-
SHA1
8d0ccae44dc6e83f6c87385b8be0bdd37bc99ee3
-
SHA256
1587565084b081d6f1cd0eeafecf57cf9faf47be650242417b82624704bc2eab
-
SHA512
ae2bb08d235296b0229ca2091c3c06f70d67bb9a2c0bfdbf0cef0a32365c55b4383e40d806c346033518c5ff7ed7b6aba11029e77c8fe04bda827f651904b57e
-
SSDEEP
6144:YyXgmYsNpmULLUUblLK+kYQZ5rtFTJMNrm/nmbj/m:RX9FN5LQUbLhMNTu1smW
Malware Config
Signatures
Files
-
1587565084b081d6f1cd0eeafecf57cf9faf47be650242417b82624704bc2eab.exe windows x86
b52b25ab7932ff7bbce508532f4491c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
GetFileAttributesW
GetPrivateProfileIntA
VirtualProtectEx
SetCommBreak
CloseHandle
GetCurrentProcess
GlobalLock
GetModuleHandleA
CreateDirectoryW
LocalFlags
GetStringTypeA
DeviceIoControl
SetLastError
FindClose
GetCurrentThread
HeapFree
CreateEventA
GetVersionExA
GetFileAttributesW
RemoveDirectoryW
user32
IsZoomed
SetCursorPos
wsprintfW
LoadCursorA
SetFocus
DispatchMessageA
DefDlgProcW
IsWindow
PostMessageW
GetWindowLongW
IsDialogMessageA
PeekMessageW
GetWindowTextW
msorcl32
SQLConnect
SQLError
SQLCancel
SQLDisconnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ