Static task
static1
Behavioral task
behavioral1
Sample
bd28aa3b12b4c4ce1029c8841145eff6440f49c0faacbc2efc862467d0d6f233.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd28aa3b12b4c4ce1029c8841145eff6440f49c0faacbc2efc862467d0d6f233.exe
Resource
win10v2004-20220812-en
General
-
Target
bd28aa3b12b4c4ce1029c8841145eff6440f49c0faacbc2efc862467d0d6f233
-
Size
311KB
-
MD5
6a9f0820efed556d0035723261b71af0
-
SHA1
aaeb076df3509204dfc42e6d86c8d395730c2ffa
-
SHA256
bd28aa3b12b4c4ce1029c8841145eff6440f49c0faacbc2efc862467d0d6f233
-
SHA512
c32a55bbc84f6534f46dd2ba50b60e38a0c1dc144e2d0a36da4ae7b58fb067c4ed0a1eb0ff96cc41a2bbf359069eee2a29e45a8ada15e2b7d6c01af1078bbd05
-
SSDEEP
6144:JcLphHcaZUpVXZl2WtaxlHkZqEHjZxMfTfoe6UeFODo:yLzH4f2pxlEZqkezBnM
Malware Config
Signatures
Files
-
bd28aa3b12b4c4ce1029c8841145eff6440f49c0faacbc2efc862467d0d6f233.exe windows x86
efdf8e39f9bd10c099d4ba64ad8ccd7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
VirtualProtectEx
RemoveDirectoryA
DeviceIoControl
GlobalLock
CloseHandle
GetPrivateProfileIntA
GetVersionExA
GlobalFlags
GetCurrentProcess
LoadLibraryA
GetStdHandle
HeapFree
CreateEventA
CreateDirectoryW
GetDriveTypeA
GetCurrentThread
GetStringTypeA
GetPrivateProfileSectionA
GetFileAttributesW
FindVolumeClose
shell32
SHGetMalloc
StrChrA
DragFinish
ExtractIconA
DragQueryFileA
DragAcceptFiles
ShellMessageBoxA
ShellAboutA
DllUnregisterServer
DllUnregisterServer
SHGetSettings
DuplicateIcon
SHFree
odbccp32
SQLConfigDataSource
SQLInstallODBC
SQLGetAvailableDrivers
SQLInstallDriver
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ