Static task
static1
Behavioral task
behavioral1
Sample
34c1c1667c6634e4c8532da3d6759991492009b971dd4c400fc3a0678e9addbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34c1c1667c6634e4c8532da3d6759991492009b971dd4c400fc3a0678e9addbf.exe
Resource
win10v2004-20220812-en
General
-
Target
34c1c1667c6634e4c8532da3d6759991492009b971dd4c400fc3a0678e9addbf
-
Size
304KB
-
MD5
a17b7f67da9d939b61bfce15d4b83df0
-
SHA1
bc1ecdbf098d83e0cd9bb8386ee56d667fd8a87b
-
SHA256
34c1c1667c6634e4c8532da3d6759991492009b971dd4c400fc3a0678e9addbf
-
SHA512
79c9a881394c6d64817f4358815a93400dad68a91f91b3ba88db740e283a11fa334d287f1173e3f6ea88ff6c06be2b786b2e037f95621822992f5987b9bc5698
-
SSDEEP
6144:JHgmYsNqdeT/ID/ldMyV//x235fqe78lkIiCK0vj3OyEjfn:JH9FNqdeTI8+Z49b7v1X0bQz
Malware Config
Signatures
Files
-
34c1c1667c6634e4c8532da3d6759991492009b971dd4c400fc3a0678e9addbf.exe windows x86
f9033b5e0fee3b862e2766758df4b2f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GlobalLock
CreateDirectoryW
GetVersionExA
CreateEventA
GetModuleHandleA
DeviceIoControl
LocalFlags
CloseHandle
GetCurrentProcess
SetCommBreak
GetFileAttributesW
GetPrivateProfileIntA
HeapFree
FindClose
GetPrivateProfileSectionA
GetCurrentThread
RemoveDirectoryW
GetFileAttributesW
GetStringTypeA
VirtualProtectEx
user32
LoadCursorA
IsDialogMessageA
GetWindowLongW
SetCursorPos
SetFocus
wsprintfW
IsWindow
IsZoomed
PeekMessageW
PostMessageW
DefDlgProcA
GetWindowTextW
DispatchMessageA
msorcl32
SQLDisconnect
SQLCancel
SQLError
SQLConnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE