Static task
static1
Behavioral task
behavioral1
Sample
df5bd38b08f05ca4590061aaa0aa405b9c11dabded925235973f764af87adc07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df5bd38b08f05ca4590061aaa0aa405b9c11dabded925235973f764af87adc07.exe
Resource
win10v2004-20220901-en
General
-
Target
df5bd38b08f05ca4590061aaa0aa405b9c11dabded925235973f764af87adc07
-
Size
309KB
-
MD5
a13c2ca6cfa795a901e6c947ca794ee6
-
SHA1
1b58d34d939609a4411c65e67c0e0e987a2ae790
-
SHA256
df5bd38b08f05ca4590061aaa0aa405b9c11dabded925235973f764af87adc07
-
SHA512
f188c7a6ceb4dde842746cac84050b16bc6517d7e869eea6bc1d1efa25d0435bf67cfc6319fda8f62ab45180b6b6cbd274e07790e4af0f2c2897d13bf96299ed
-
SSDEEP
6144:fgmYsN6t45F/1h3EJfCnSNmr7h6yuNrjYA3rH8QPf+njpCHs:f9FN6tIF/1h05S6yuNHYAzP2njpYs
Malware Config
Signatures
Files
-
df5bd38b08f05ca4590061aaa0aa405b9c11dabded925235973f764af87adc07.exe windows x86
9d94bb0053bdd06f751d7fea824d0c9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
GetPrivateProfileIntA
GetFileAttributesW
SetLastError
SetCommBreak
LocalFlags
HeapFree
DeviceIoControl
CreateDirectoryW
GlobalLock
GetModuleHandleA
GetCurrentThread
CreateEventA
GetVersionExA
VirtualProtectEx
GetPrivateProfileSectionA
GetFileAttributesW
RemoveDirectoryW
FindClose
GetCurrentProcess
CloseHandle
user32
SetFocus
PostMessageW
LoadCursorA
IsDialogMessageA
GetWindowTextW
DispatchMessageA
IsZoomed
IsWindow
SetCursorPos
PeekMessageW
DefDlgProcW
GetWindowLongW
wsprintfW
msorcl32
SQLCancel
SQLDisconnect
SQLError
SQLConnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ