Static task
static1
Behavioral task
behavioral1
Sample
dab58fea4b6971d3a9891eeef6f8f17ce67d133a5f3ca4b45a81ccde530a04ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dab58fea4b6971d3a9891eeef6f8f17ce67d133a5f3ca4b45a81ccde530a04ff.exe
Resource
win10v2004-20220812-en
General
-
Target
dab58fea4b6971d3a9891eeef6f8f17ce67d133a5f3ca4b45a81ccde530a04ff
-
Size
92KB
-
MD5
363c05524604846e0aac6ba214647539
-
SHA1
bf23225e5f351d36024dd7bb0a0ced44b77555d7
-
SHA256
dab58fea4b6971d3a9891eeef6f8f17ce67d133a5f3ca4b45a81ccde530a04ff
-
SHA512
94cca356bfb68479d028419d6831d02090decef3df482c84942ef46cd84dae334472e2eefbfcc1c3b8d48aa59cf7933af6690cc42c25cfc66e8a9cdde6016773
-
SSDEEP
1536:lnYEDH2OOOOOOOOOOOOSZOOOOOOOOOOOOdOOOOOOOOOOOO569WNXJG3KvZvbSX45:BH2OOOOOOOOOOOOoOOOOOOOOOOOOdOOR
Malware Config
Signatures
Files
-
dab58fea4b6971d3a9891eeef6f8f17ce67d133a5f3ca4b45a81ccde530a04ff.exe windows x86
8d3979847d76795d648580ca9fde4bbf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
odbctrac
TraceSQLCancel
TraceSQLFetch
TraceSQLError
TraceSQLBindCol
dhcpsapi
DhcpAddServer
DhcpCreateOption
DhcpCreateClass
DhcpCreateSubnet
user32
LoadCursorA
LoadBitmapW
PostMessageW
LoadImageW
DrawTextExA
MessageBoxA
OemToCharA
wsprintfW
FindWindowW
GetFocus
CreateDesktopA
InsertMenuW
SendMessageA
DefDlgProcW
EndDialog
cryptdll
MD5Update
CDBuildVect
MD5Final
msimg32
AlphaBlend
vSetDdrawflag
GradientFill
TransparentBlt
DllInitialize
kernel32
GetDateFormatA
CreateSemaphoreA
GetStartupInfoW
SearchPathW
GetLogicalDriveStringsA
CreateDirectoryW
WaitForSingleObjectEx
CompareStringW
GetEnvironmentVariableW
GetCurrentProcess
GetProcAddress
GetLocalTime
GetACP
CreateMutexW
GetModuleHandleA
GetCommandLineW
FindFirstFileA
GetStringTypeA
HeapFree
DeleteFileA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ