Static task
static1
Behavioral task
behavioral1
Sample
5694ed18cfa3979a66b8aca8606476ce14182d140b7df57168c1bd430fedc84b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5694ed18cfa3979a66b8aca8606476ce14182d140b7df57168c1bd430fedc84b.exe
Resource
win10v2004-20220901-en
General
-
Target
5694ed18cfa3979a66b8aca8606476ce14182d140b7df57168c1bd430fedc84b
-
Size
310KB
-
MD5
68e727d454246ceec1713f53eb962210
-
SHA1
e87e3b00dfb910aadb5dcf86c82e347f08b18bb3
-
SHA256
5694ed18cfa3979a66b8aca8606476ce14182d140b7df57168c1bd430fedc84b
-
SHA512
e9f75297175e2257491ae86ea996630b30240afdc667f353c7da77d615aa0fbab391cff14c565bf1f7dcc0317cfff54d6988f739d476eee286884d8d59a28f99
-
SSDEEP
6144:iLmrzeADOoqvh8Zu4gb48TGcDEGGDwRQHRDN:iLCzeASVgYbDNQLDwWB
Malware Config
Signatures
Files
-
5694ed18cfa3979a66b8aca8606476ce14182d140b7df57168c1bd430fedc84b.exe windows x86
896667c65d321f5edfca23eb213e1cf3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
CloseHandle
GetPrivateProfileSectionA
OpenMutexA
GetPrivateProfileIntW
HeapFree
CreateEventW
LoadLibraryA
FindVolumeClose
GetCurrentThread
VirtualProtectEx
HeapDestroy
GetStdHandle
lstrlenA
GetCurrentProcess
LocalLock
DeviceIoControl
GetDriveTypeA
GetVersionExW
GetStringTypeA
DeleteFileA
shell32
ShellMessageBoxA
StrChrA
SHFree
SHGetMalloc
SHGetMalloc
ShellAboutA
DuplicateIcon
SHGetSettings
DragAcceptFiles
DragQueryFileA
ExtractIconA
DllUnregisterServer
DragFinish
odbccp32
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ