Static task
static1
Behavioral task
behavioral1
Sample
fcaedc84a2fcd2f87af43ae34261bdf44da74e8bcc9f27de8ff858cecaddc06e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fcaedc84a2fcd2f87af43ae34261bdf44da74e8bcc9f27de8ff858cecaddc06e.exe
Resource
win10v2004-20220901-en
General
-
Target
fcaedc84a2fcd2f87af43ae34261bdf44da74e8bcc9f27de8ff858cecaddc06e
-
Size
20KB
-
MD5
76bf5416308f7309dab5df263cc8d970
-
SHA1
5d94513e37552affe0b69aab7eddb8587b715a5c
-
SHA256
fcaedc84a2fcd2f87af43ae34261bdf44da74e8bcc9f27de8ff858cecaddc06e
-
SHA512
ddf76f10993ec95115d1926be65ea3f84ad3b2620346bea17b97ca84da635da1c31bf5d0937abf545c9f6d4cf23a69fd939bfe7f69587c7335b89f9ed3d34af4
-
SSDEEP
384:jwBOVPLjTCoZ5o06h1c9UchUPQFh+Urj:8BSTCoZJSPI7j
Malware Config
Signatures
Files
-
fcaedc84a2fcd2f87af43ae34261bdf44da74e8bcc9f27de8ff858cecaddc06e.exe windows x86
dd92f3b01aa75be6c0152e36c0a5610b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLogicalDrives
GetLogicalDrives
LoadLibraryA
GetFileAttributesA
VirtualProtect
lstrcpyW
GetStdHandle
OpenMutexW
GetLogicalDriveStringsW
GetLogicalDrives
SetCurrentDirectoryW
GetStringTypeA
GetLogicalDrives
CreateEventA
GetVersion
GetLogicalDrives
sqlsrv32
SQLBindCol
SQLFetch
SQLDisconnect
SQLCancel
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE