Static task
static1
Behavioral task
behavioral1
Sample
01b142f63612e08889b3895d4d25f93a73dd0aeca90d5682adb49f4a4d6697c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01b142f63612e08889b3895d4d25f93a73dd0aeca90d5682adb49f4a4d6697c3.exe
Resource
win10v2004-20220812-en
General
-
Target
01b142f63612e08889b3895d4d25f93a73dd0aeca90d5682adb49f4a4d6697c3
-
Size
310KB
-
MD5
78c848b0ce2ed5786d280e6bf54900e0
-
SHA1
7f30694cf443bf6e013532f38c81405e0f645243
-
SHA256
01b142f63612e08889b3895d4d25f93a73dd0aeca90d5682adb49f4a4d6697c3
-
SHA512
2b9747af20782e9a49d12fa89c93004f8497c23f48730920cd99a57515bb93c32a12d106b7455511803067cfd4aa5914c390d87097913830a44981d31ef20a3b
-
SSDEEP
6144:F48kiLGNKvt2KPE7OFAY/WOcSNeflCys8VUeoLBL7o:97LGNKoK8HyXkfQy3vGL7o
Malware Config
Signatures
Files
-
01b142f63612e08889b3895d4d25f93a73dd0aeca90d5682adb49f4a4d6697c3.exe windows x86
8e995bdb73a9ae3b11fab19b95625308
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
HeapDestroy
lstrlenA
CreateEventA
GetDriveTypeA
GetStringTypeA
LoadLibraryA
GetPrivateProfileIntW
GetVersionExA
FindVolumeClose
DeviceIoControl
LocalLock
GetFileAttributesA
VirtualProtectEx
CloseHandle
HeapFree
GetCurrentProcess
GetStdHandle
GetCurrentThread
OpenMutexA
DeleteFileA
shell32
SHGetSettings
SHGetMalloc
DragFinish
DragQueryFileA
DuplicateIcon
ExtractIconA
DllUnregisterServer
ShellAboutA
DragAcceptFiles
ShellMessageBoxA
StrChrA
SHFree
SHFree
odbccp32
SQLInstallODBC
SQLGetAvailableDrivers
SQLInstallDriver
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ