Static task
static1
Behavioral task
behavioral1
Sample
cea814ccdd745d5421d062850ae4705c69c7ae5c32055d1b698429e9212c7416.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cea814ccdd745d5421d062850ae4705c69c7ae5c32055d1b698429e9212c7416.exe
Resource
win10v2004-20220901-en
General
-
Target
cea814ccdd745d5421d062850ae4705c69c7ae5c32055d1b698429e9212c7416
-
Size
309KB
-
MD5
8391f895425c240f784f680e16575e80
-
SHA1
86a9ca94b8d74da3b2e8ad712bf012df1bb51bc4
-
SHA256
cea814ccdd745d5421d062850ae4705c69c7ae5c32055d1b698429e9212c7416
-
SHA512
c98b917b6e323b7fbff12f4c38e46d1ab556779748d7c19473c8b4d288b7a20dea13f4af51afedda0c8785be29c6c530679f8300ad922d4d61c62f0c3270ce7e
-
SSDEEP
6144:zlOgmYsNaTDacz4C9/FhN9pdi57D+wcfMDxRkzCr5YPWgbOnUnXuM:5O9FNaTTtVQ5+fMDx+PWgbyUXuM
Malware Config
Signatures
Files
-
cea814ccdd745d5421d062850ae4705c69c7ae5c32055d1b698429e9212c7416.exe windows x86
42237349d4bc866fe9072a71173a2234
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetPrivateProfileIntA
SetLastError
GetCurrentThread
LocalFlags
FindClose
GetVersionExA
GetFileAttributesW
SetCommBreak
GetPrivateProfileSectionA
RemoveDirectoryW
GetStringTypeA
GetCurrentProcess
DeviceIoControl
GlobalLock
GetFileAttributesW
HeapFree
CreateEventA
CreateDirectoryW
GetModuleHandleA
VirtualProtectEx
user32
IsZoomed
DispatchMessageA
PeekMessageW
DefDlgProcW
IsDialogMessageA
wsprintfW
SetCursorPos
IsWindow
SetFocus
PostMessageW
GetWindowLongW
LoadCursorA
GetWindowTextW
msorcl32
SQLConnect
SQLError
SQLCancel
SQLDisconnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ