Static task
static1
Behavioral task
behavioral1
Sample
ce291312e8c3b70f8dbbd16c6797a50d51bdf7ca2033ed4b34b41d3c597c4c29.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce291312e8c3b70f8dbbd16c6797a50d51bdf7ca2033ed4b34b41d3c597c4c29.exe
Resource
win10v2004-20220901-en
General
-
Target
ce291312e8c3b70f8dbbd16c6797a50d51bdf7ca2033ed4b34b41d3c597c4c29
-
Size
112KB
-
MD5
bc26758c352410e1bdcf5bab987c1f73
-
SHA1
bf6d63242748361b718774ee3b83e2950ca1c58e
-
SHA256
ce291312e8c3b70f8dbbd16c6797a50d51bdf7ca2033ed4b34b41d3c597c4c29
-
SHA512
b7223edd3e8e01447e2b45221ea0f6629b4628eb438d39d2efdb1f99932e4150bd1a017956c73596bac6e46935f477cf922e18c6eba3dbcdaf19c87c9ba87320
-
SSDEEP
1536:ZtjnmJBkRFePcZBZ3lQ446ilCixuIo/9xfzC6Tsg1occZ3a2+kEhMESaQY+ulcPl:zeErZDRiIxfvsmo73I+ESa3+uif
Malware Config
Signatures
Files
-
ce291312e8c3b70f8dbbd16c6797a50d51bdf7ca2033ed4b34b41d3c597c4c29.exe windows x86
f6a5aab73107666add4452fd9bc2efde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
EndDialog
CreateDesktopA
LoadCursorA
OemToCharA
DrawStateW
CreateWindowExW
PostMessageA
InsertMenuA
EnumDesktopsA
GetCursorPos
EnumWindows
LoadImageA
DefDlgProcW
LoadBitmapW
odbctrac
TraceSQLError
TraceSQLConnect
TraceSQLBindCol
TraceSQLFetch
TraceSQLCancel
kernel32
SetErrorMode
CreateDirectoryW
GetShortPathNameA
GetDateFormatA
ReadConsoleW
GetCommandLineW
GetProcAddress
ReplaceFileW
GetCurrentProcess
CreateSemaphoreA
GetModuleHandleA
GetACP
lstrcpyA
CompareStringW
InitializeCriticalSection
GetLocaleInfoW
WaitForSingleObject
CreateEventA
DeleteFileA
dhcpcsvc
DhcpEnumClasses
McastGenUID
McastApiCleanup
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ