Static task
static1
Behavioral task
behavioral1
Sample
35cebd1717b1d469d6798439fe382a58b75034cc85981e942ed7039c53ba4649.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35cebd1717b1d469d6798439fe382a58b75034cc85981e942ed7039c53ba4649.exe
Resource
win10v2004-20220812-en
General
-
Target
35cebd1717b1d469d6798439fe382a58b75034cc85981e942ed7039c53ba4649
-
Size
128KB
-
MD5
5cc8aacecebbe0bdbcaf31c6415403f0
-
SHA1
7074f5c5dc98c56ae8dfbb0e882b02685680c18f
-
SHA256
35cebd1717b1d469d6798439fe382a58b75034cc85981e942ed7039c53ba4649
-
SHA512
afccce3124699eef8309cd615ce2beec9e57b1a95fa60a88ccde43197fe09010ac932d23ce8d23291e65b8ba14915d53fbaf2ee619ab97279c3489b13d2320dc
-
SSDEEP
3072:NkUEH3PUZTwF5Oxj91iNc9WmgbzQMnf51TQz:AX62OxB1iKW97nf5e
Malware Config
Signatures
Files
-
35cebd1717b1d469d6798439fe382a58b75034cc85981e942ed7039c53ba4649.exe windows x86
6f5ffdf11e5741df87fbc1f8c125706c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
SetCommBreak
SetLastError
FindClose
GlobalLock
RemoveDirectoryW
GetFileAttributesW
CreateDirectoryW
CloseHandle
GetModuleHandleA
LocalFlags
GetPrivateProfileSectionA
GetStringTypeA
CreateEventA
GetFileAttributesW
GetVersionExA
GetCurrentThread
VirtualProtectEx
DeviceIoControl
GetPrivateProfileIntA
HeapFree
user32
SetCursorPos
wsprintfW
PeekMessageW
GetWindowLongW
DispatchMessageA
GetWindowTextW
LoadCursorA
SetFocus
IsDialogMessageA
DefDlgProcW
IsZoomed
IsWindow
PostMessageW
msorcl32
SQLCancel
SQLDisconnect
SQLError
SQLConnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ