Static task
static1
Behavioral task
behavioral1
Sample
7b8c7f15a4d67f80c72bfc08482cb5d88296941c79da2a2c685f85c117f43bc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b8c7f15a4d67f80c72bfc08482cb5d88296941c79da2a2c685f85c117f43bc2.exe
Resource
win10v2004-20220901-en
General
-
Target
7b8c7f15a4d67f80c72bfc08482cb5d88296941c79da2a2c685f85c117f43bc2
-
Size
812KB
-
MD5
599a3ab4a985ccfc365f51bdef8acac6
-
SHA1
d198c134e5dc26e869963b6d537714c8e46d03b9
-
SHA256
7b8c7f15a4d67f80c72bfc08482cb5d88296941c79da2a2c685f85c117f43bc2
-
SHA512
ebb90122a60a0df6c2e208168049c46750097ff825d9efbb0736600522e343e2edaa7994b89cbb8b36af2852ad753e85e29c7626b1f0bfd13e127bfba269e62a
-
SSDEEP
24576:a1m62FXH7TmS1FW+knR92Gmg6SomDWQUm8k0LVHJ:xLF3v5FW++/hWmDWQVq
Malware Config
Signatures
Files
-
7b8c7f15a4d67f80c72bfc08482cb5d88296941c79da2a2c685f85c117f43bc2.exe windows x86
d6f2c4b8a7196514a6f6e7a74ed69189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenMutexW
GetLogicalDriveStringsW
GetLogicalDrives
GetLogicalDrives
GetLogicalDrives
LoadLibraryA
GetLogicalDrives
GetVersion
GetFileAttributesA
CreateEventA
GetStringTypeA
VirtualProtect
SetCurrentDirectoryW
GetStdHandle
GetLogicalDrives
lstrcpyW
sqlsrv32
SQLDisconnect
SQLBindCol
SQLCancel
SQLFetch
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 802KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE