Static task
static1
Behavioral task
behavioral1
Sample
3546bcd8c5bf959023e494ec9a1f46c1f169d93906a6ea74cc5c6389fe4a841d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3546bcd8c5bf959023e494ec9a1f46c1f169d93906a6ea74cc5c6389fe4a841d.exe
Resource
win10v2004-20220901-en
General
-
Target
3546bcd8c5bf959023e494ec9a1f46c1f169d93906a6ea74cc5c6389fe4a841d
-
Size
799KB
-
MD5
823d004b2bc54fc13ef0df22d3bc9990
-
SHA1
5347b8d0cca2fdec2ffad962b13ea3b429dc5347
-
SHA256
3546bcd8c5bf959023e494ec9a1f46c1f169d93906a6ea74cc5c6389fe4a841d
-
SHA512
403729082703e863f5c7b5515407ff6b40ea402b774a08e55107f51e02af457c35a8e6f2f398d903b32e6be5c3eb2554719f0c3929f5e74168c526102f9bddbd
-
SSDEEP
24576:c1ePQfDBqUC0hPTgxQJLpKPCyJXT/axKG4CWQPLB3:c13FqFuTuQJdACoTQKyTTB
Malware Config
Signatures
Files
-
3546bcd8c5bf959023e494ec9a1f46c1f169d93906a6ea74cc5c6389fe4a841d.exe windows x86
d72351b4790ebf9fe2b18f255a0a7fc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeA
FindVolumeClose
GetFileAttributesW
CreateEventA
GetCurrentProcess
GetPrivateProfileSectionA
OpenMutexA
VirtualProtectEx
GetFileAttributesW
DeviceIoControl
HeapFree
GlobalFlags
GetCurrentThread
GetStringTypeA
LoadLibraryA
CloseHandle
GetStdHandle
GlobalLock
GetVersionExA
GetPrivateProfileIntA
lstrlenA
shell32
DllUnregisterServer
DragAcceptFiles
DuplicateIcon
DragFinish
SHFree
StrChrA
SHGetSettings
ExtractIconA
ShellAboutA
SHFree
DragQueryFileA
SHGetMalloc
ShellMessageBoxA
odbccp32
SQLInstallDriver
SQLGetAvailableDrivers
SQLInstallODBC
SQLConfigDataSource
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ