Static task
static1
Behavioral task
behavioral1
Sample
6d3b75448db7a04316a64cd253f27ca20d8eaa3680e6d2ec3527348ad91f3780.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d3b75448db7a04316a64cd253f27ca20d8eaa3680e6d2ec3527348ad91f3780.exe
Resource
win10v2004-20220812-en
General
-
Target
6d3b75448db7a04316a64cd253f27ca20d8eaa3680e6d2ec3527348ad91f3780
-
Size
20KB
-
MD5
904e77b57585523281a12b5ed2ee5fa0
-
SHA1
453baf6d7fc18b6045d13e676942d92e2aafd297
-
SHA256
6d3b75448db7a04316a64cd253f27ca20d8eaa3680e6d2ec3527348ad91f3780
-
SHA512
385a58e5a086f42746ed61a9f7af2373074d942ed89e26325d28f78aba90f1c720ab5cb2f9e4f91668e85c50e8e544804afe2fe286ac58ea11ecd94a602b5388
-
SSDEEP
384:RkZNqCzIxMe7TACHcb4ipRO2lFD9Fd1rVo+gUgD7OgdCWm4pWv:RKqCYmvxFD9d1I7vdfE
Malware Config
Signatures
Files
-
6d3b75448db7a04316a64cd253f27ca20d8eaa3680e6d2ec3527348ad91f3780.exe windows x86
0f445ad3c7683eaa2b932a9c3d8d6db1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
sqlunirl
_GetUnicodeRedirectionLayer@0
sqlresld
SQLUILoadResourceDLL
kernel32
GetStartupInfoA
MultiByteToWideChar
GetModuleHandleA
GetUserDefaultLCID
advapi32
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcrt
__getmainargs
__set_app_type
strcat
_stricmp
strcpy
wcscat
_wcsicmp
wcscpy
_exit
_XcptFilter
exit
_acmdln
_onexit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
_controlfp
__dllonexit
ole32
CoCreateInstance
CoInitialize
CoUninitialize
semsfc
?SetMainHelpCollection@SHelp@@QAEXPBG0@Z
?FreeLib@SHelp@@QAEXXZ
?SGetWindowsPlatform@@YAIXZ
?GetApp@SApplication@@SAPAV1@XZ
?SetMainHelpFile@SHelp@@QAEXPBG0@Z
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ