Static task
static1
Behavioral task
behavioral1
Sample
b5cbba42675521b9e28763b81c5e8ca7acdf9f172b5966de24b316518f3a776d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5cbba42675521b9e28763b81c5e8ca7acdf9f172b5966de24b316518f3a776d.exe
Resource
win10v2004-20220812-en
General
-
Target
b5cbba42675521b9e28763b81c5e8ca7acdf9f172b5966de24b316518f3a776d
-
Size
608KB
-
MD5
a7f500c9164c326fdb15757e6ddeb89d
-
SHA1
d4a5cec3c9a98d3e52795a4652bc30562320035c
-
SHA256
b5cbba42675521b9e28763b81c5e8ca7acdf9f172b5966de24b316518f3a776d
-
SHA512
36d5deba1d063b37b3b2250d3eb0e0bbe17221fd319e421e6a62625d49b8fa673b0631304a932584ac73d2b3caba633a55db05843f3184d69895cb95d96b86ca
-
SSDEEP
12288:kBB+S1QfS0FUdCTzhlx+Wp/9h5STuilpdlKPVach:ayf4dC1l9h5SyilblSVach
Malware Config
Signatures
Files
-
b5cbba42675521b9e28763b81c5e8ca7acdf9f172b5966de24b316518f3a776d.exe windows x86
fe81c9d2bb9dc3dbdd044d9be4439037
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
rtm
BestMatchInTable
odbc32
SQLGetDescRec
SQLGetDescRecA
SQLGetDescRecW
SQLGetDiagField
SQLGetDiagFieldA
SQLGetDiagFieldW
SQLGetDiagRec
SQLGetDiagRecA
SQLGetDiagRecW
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfo
SQLGetInfoA
SQLGetInfoW
SQLGetStmtAttr
SQLGetStmtAttrA
SQLGetStmtAttrW
SQLGetStmtOption
SQLGetTypeInfo
SQLGetTypeInfoA
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSql
SQLNativeSqlA
SQLNativeSqlW
SQLNumParams
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrepareA
SQLPrepareW
kernel32
ReadFile
GetLastError
GetWindowsDirectoryA
RtlUnwind
FlushConsoleInputBuffer
GetConsoleFontInfo
GetConsoleFontSize
SetCommMask
SetConsoleTitleA
GetWriteWatch
CreateFileA
duser
AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
DUserBuildGadget
DUserCastClass
DUserCastDirect
DUserCastHandle
DUserDeleteGadget
DUserFindClass
DUserRegisterStub
DUserBuildGadget
DUserCastClass
DUserCastDirect
DUserCastHandle
DUserDeleteGadget
DUserFindClass
ksuser
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
Sections
.text Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 206KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE