Static task
static1
Behavioral task
behavioral1
Sample
def9922daa8f4595ecf888fced3e7f19b69a5cbe4d4e0aee7bbe0ec7ce379087.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
def9922daa8f4595ecf888fced3e7f19b69a5cbe4d4e0aee7bbe0ec7ce379087.exe
Resource
win10v2004-20220812-en
General
-
Target
def9922daa8f4595ecf888fced3e7f19b69a5cbe4d4e0aee7bbe0ec7ce379087
-
Size
83KB
-
MD5
92a5ba7b5ba28dc17c6812bb079cdd50
-
SHA1
84d7c51fcfdcb23cc7df2da6b67c2caa580e116a
-
SHA256
def9922daa8f4595ecf888fced3e7f19b69a5cbe4d4e0aee7bbe0ec7ce379087
-
SHA512
fda85985f6d25a589af4d4ddaa88b3692dbf3b3a819d93af41847e761c841930878e25b7478886e3a0e3eba0947ed640e30107cfead93e546f5c45e127cd2532
-
SSDEEP
768:Y9He31y85eUk8Z7zFvJ1emWGgQkFKrAqAadrlwSldroJbipTGSch+RfnIjvGngYr:wW8GDkFKrAqjdOSlOJboGSlNWGnpVE/
Malware Config
Signatures
Files
-
def9922daa8f4595ecf888fced3e7f19b69a5cbe4d4e0aee7bbe0ec7ce379087.exe windows x86
e675bd759958fd949ea275005dd592bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindVolumeClose
CreateEventA
VirtualProtectEx
CloseHandle
GetVersionExA
GetDriveTypeA
GetPrivateProfileIntA
OpenMutexA
GlobalFlags
GlobalLock
GetFileAttributesW
HeapFree
LoadLibraryA
DeviceIoControl
GetStdHandle
lstrlenA
GetStringTypeA
GetCurrentProcess
GetFileAttributesW
GetPrivateProfileSectionA
GetCurrentThread
shell32
SHGetSettings
ExtractIconA
SHFree
DllUnregisterServer
DragQueryFileA
SHGetMalloc
DragAcceptFiles
DragFinish
DuplicateIcon
SHFree
StrChrA
ShellMessageBoxA
ShellAboutA
odbccp32
SQLGetAvailableDrivers
SQLInstallDriver
SQLInstallODBC
SQLConfigDataSource
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ