Static task
static1
Behavioral task
behavioral1
Sample
430355d9490545c8b77ac25eecc84b420f4c2e6645cc250f30c6eada0c967a01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
430355d9490545c8b77ac25eecc84b420f4c2e6645cc250f30c6eada0c967a01.exe
Resource
win10v2004-20220812-en
General
-
Target
430355d9490545c8b77ac25eecc84b420f4c2e6645cc250f30c6eada0c967a01
-
Size
131KB
-
MD5
8381fccda57cfc65de9fa556c7259690
-
SHA1
ccb612479ff40087b20866a59ae33e750d0f2d2c
-
SHA256
430355d9490545c8b77ac25eecc84b420f4c2e6645cc250f30c6eada0c967a01
-
SHA512
ded13f52949cc21a4fa0328fce23a913d29027fa88e37ca3fc494818a1b471f94b9acd6ded3053e5a6722cd29ce2d54ec3fd336a9404b61658f36bc9d300bc02
-
SSDEEP
1536:3mSBZ2cf0GBMT8CyrvAQSXkt1Lo3AUvO/1epFLcZTuhcqLO81oo7L0D:3moH0mrvLNt103AUT341gcKOP2L0
Malware Config
Signatures
Files
-
430355d9490545c8b77ac25eecc84b420f4c2e6645cc250f30c6eada0c967a01.exe windows x86
d9315ac606905e954db557dfbd10dea8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetFileAttributesA
VirtualProtectEx
GetCurrentProcess
GetPrivateProfileSectionA
GetStringTypeA
OpenMutexA
GetStdHandle
CreateEventW
GetPrivateProfileIntW
GetDriveTypeA
DeviceIoControl
FindVolumeClose
LoadLibraryA
GetCurrentThread
DeleteFileA
LocalLock
lstrlenA
DeviceIoControl
HeapFree
CloseHandle
shell32
DragFinish
ShellAboutA
StrChrA
SHGetSettings
DragAcceptFiles
SHGetMalloc
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
ExtractIconA
SHFree
DuplicateIcon
DllUnregisterServer
odbccp32
SQLInstallODBC
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ