Static task
static1
Behavioral task
behavioral1
Sample
ebf993d6f5507a3f744a300173edfa836f0fe9456ecf06e4c1bb67fc1e2dd361.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebf993d6f5507a3f744a300173edfa836f0fe9456ecf06e4c1bb67fc1e2dd361.exe
Resource
win10v2004-20220812-en
General
-
Target
ebf993d6f5507a3f744a300173edfa836f0fe9456ecf06e4c1bb67fc1e2dd361
-
Size
304KB
-
MD5
63efc960436c2834cd646116cf960dff
-
SHA1
e0d36cdee13ddff3758913e928b843d9e7d4382e
-
SHA256
ebf993d6f5507a3f744a300173edfa836f0fe9456ecf06e4c1bb67fc1e2dd361
-
SHA512
793ed9bee417f9d49aa6947de2e190c21cfdf386459d89128ffa3df5a8066e0663859e45ebf8a7657d0506a20be4358ecd3e5c30c1708ec22ea0808cdcd3c376
-
SSDEEP
6144:qgmYsNfVXNUv8UfZYm45Yfz9bY9ol5SW6piczl720k:q9FNffHUfZYm4WBbnipiUY0
Malware Config
Signatures
Files
-
ebf993d6f5507a3f744a300173edfa836f0fe9456ecf06e4c1bb67fc1e2dd361.exe windows x86
72d5bf215f2f7d6a27bd6878c0a19a3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoW
GetStringTypeA
GlobalLock
CreateEventA
GetCurrentThread
RemoveDirectoryW
FindClose
TlsGetValue
CreateDirectoryW
GetFileAttributesW
SetLastError
SetCommBreak
GetFileAttributesW
LocalFlags
GetPrivateProfileSectionA
GetVersionExA
GetModuleHandleA
VirtualProtectEx
HeapFree
DeviceIoControl
GetCurrentProcess
user32
DefDlgProcA
LoadCursorA
GetWindowLongW
SetCursor
wsprintfW
PostMessageW
SetCursorPos
GetWindowTextW
IsWindow
DispatchMessageA
SetFocus
PeekMessageW
IsDialogMessageA
msorcl32
SQLConnect
SQLError
SQLDisconnect
SQLCancel
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE