Static task
static1
Behavioral task
behavioral1
Sample
e52a352586740df83f78be7c8f6021d08519c4422e4f679af3c644d5b55accc1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e52a352586740df83f78be7c8f6021d08519c4422e4f679af3c644d5b55accc1.exe
Resource
win10v2004-20220812-en
General
-
Target
e52a352586740df83f78be7c8f6021d08519c4422e4f679af3c644d5b55accc1
-
Size
304KB
-
MD5
12d20aea4ae3365013f576aa345f6cc0
-
SHA1
2c63051d9c7b28320d5146c0edd5aa260651358b
-
SHA256
e52a352586740df83f78be7c8f6021d08519c4422e4f679af3c644d5b55accc1
-
SHA512
c6e35ebbf8459d7c530e4e0576514bf9d514f831381757f6499a8c127d7ccb40b7e9b2eb8fb6be29948c55cad76b7cb4bf7df2a7996221ce8903169c2d2ac626
-
SSDEEP
6144:SwgmYsNEuyd9fqBAOPeQMNUS2GZ56kqQHhktFnEOnIQ69ARjElzfx/hk:Sw9FNYqluNUSFfhuHmBf
Malware Config
Signatures
Files
-
e52a352586740df83f78be7c8f6021d08519c4422e4f679af3c644d5b55accc1.exe windows x86
0ea9af724bdc05856ab1ebbf42e64da2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileIntA
CreateDirectoryW
LocalFlags
SetLastError
GetFileAttributesW
GetVersionExA
RemoveDirectoryW
CreateEventA
GetFileAttributesW
GetPrivateProfileSectionA
SetCommBreak
GetCurrentProcess
VirtualProtectEx
GetStringTypeA
GetCurrentThread
HeapFree
FindClose
GetModuleHandleA
CloseHandle
GlobalLock
DeviceIoControl
user32
DefDlgProcA
SetCursorPos
PeekMessageW
PostMessageW
IsDialogMessageA
GetWindowLongW
IsZoomed
DispatchMessageA
wsprintfW
LoadCursorA
IsWindow
GetWindowTextW
SetFocus
msorcl32
SQLError
SQLConnect
SQLCancel
SQLDisconnect
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE