Static task
static1
Behavioral task
behavioral1
Sample
a72c213dd6af8f47ddba89d08572e25e87bd47ec4179d324a7b6136d3498a740.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a72c213dd6af8f47ddba89d08572e25e87bd47ec4179d324a7b6136d3498a740.exe
Resource
win10v2004-20220812-en
General
-
Target
a72c213dd6af8f47ddba89d08572e25e87bd47ec4179d324a7b6136d3498a740
-
Size
310KB
-
MD5
6af64d928945d8f0df934928bf437470
-
SHA1
2f87af7a55856fdcb26e9d90f3749e837f20870b
-
SHA256
a72c213dd6af8f47ddba89d08572e25e87bd47ec4179d324a7b6136d3498a740
-
SHA512
7cb6618531aaa12a9596f6937f9690422d4c366f2ef8c75a4b056a0f4d45c2b95a3c5f2bb0bfae9edf9bf5ef85aa07671bf0fd63049fbe6d2613a03b7fe2de1c
-
SSDEEP
6144:SoXILitOnBdglTxduPayIkqwSP0+rj6Cd9lR6tAeD2uzGsOEFwthO:SoXILitqBdgl6PTIkqw0iCrlR6tvihsb
Malware Config
Signatures
Files
-
a72c213dd6af8f47ddba89d08572e25e87bd47ec4179d324a7b6136d3498a740.exe windows x86
04958124d496f47c891bbb14e5d447c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
GetPrivateProfileSectionA
LocalLock
CreateEventW
CloseHandle
DeleteFileA
VirtualProtectEx
GetStdHandle
GetCurrentProcess
FindVolumeClose
OpenMutexA
GetDriveTypeA
GetPrivateProfileIntW
GetStringTypeA
LoadLibraryA
lstrlenA
HeapDestroy
HeapFree
GetCurrentThread
GetVersionExW
DeviceIoControl
shell32
StrChrA
DllUnregisterServer
ExtractIconA
DragQueryFileA
ShellMessageBoxA
SHGetSettings
DragFinish
SHGetMalloc
DragAcceptFiles
SHGetMalloc
SHFree
ShellAboutA
DuplicateIcon
odbccp32
SQLInstallDriver
SQLGetAvailableDrivers
SQLConfigDataSource
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ