Static task
static1
Behavioral task
behavioral1
Sample
b257542648b9066564c9d10f19f00efe2a018a4df631ef27c0a3733a211908ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b257542648b9066564c9d10f19f00efe2a018a4df631ef27c0a3733a211908ae.exe
Resource
win10v2004-20220812-en
General
-
Target
b257542648b9066564c9d10f19f00efe2a018a4df631ef27c0a3733a211908ae
-
Size
73KB
-
MD5
5efc7c4a75a239aa8e1eafdd5d197230
-
SHA1
d39a78c9e45cf62f9d498653ea6262273a7ae1d4
-
SHA256
b257542648b9066564c9d10f19f00efe2a018a4df631ef27c0a3733a211908ae
-
SHA512
f760eef53f11fcc9b240f0adb10601bfbab63eb3ea11dbc14c8adb706444d51496545699d9321f0d2a01c7800b3269d2f26ad8b81a5c050f8c6f7d07f1fb77f2
-
SSDEEP
1536:0FTelrko7lKqFAIXF+d1SJXOkM+rcYXVZ1ZuO:iP5vSUW+T+rcYXVZ1Zu
Malware Config
Signatures
Files
-
b257542648b9066564c9d10f19f00efe2a018a4df631ef27c0a3733a211908ae.exe windows x86
b931712806f9f68a4f1f4aab1a2c9027
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
CloseHandle
GetCurrentThread
VirtualProtectEx
HeapFree
GetVersionExA
CreateEventA
SetLastError
GetPrivateProfileIntA
RemoveDirectoryW
DeviceIoControl
FindClose
SetCommBreak
GetStringTypeA
LocalFlags
GetFileAttributesW
GetFileAttributesW
GlobalLock
CreateDirectoryW
GetModuleHandleA
GetPrivateProfileSectionA
user32
GetWindowTextW
PeekMessageW
DispatchMessageA
SetCursorPos
LoadCursorA
IsDialogMessageA
wsprintfW
IsZoomed
GetWindowLongW
SetFocus
DefDlgProcW
IsWindow
PostMessageW
msorcl32
SQLDisconnect
SQLConnect
SQLCancel
SQLError
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ