Static task
static1
Behavioral task
behavioral1
Sample
95f02d8ffc52d802071b02312b290d4518a0002bfcae84705e817ec13cca21c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
95f02d8ffc52d802071b02312b290d4518a0002bfcae84705e817ec13cca21c5.exe
Resource
win10v2004-20220901-en
General
-
Target
95f02d8ffc52d802071b02312b290d4518a0002bfcae84705e817ec13cca21c5
-
Size
304KB
-
MD5
1ea4216bd6f5a7d2272c1e076a390d10
-
SHA1
9e2feb43ab5a7fb111992cb255841c1f33ca99f0
-
SHA256
95f02d8ffc52d802071b02312b290d4518a0002bfcae84705e817ec13cca21c5
-
SHA512
68ca1efda2e066bbe67667f25f24334dab5752da61dae7d5bda0dd31e9c59d6df74d08d08f0998a1e6934f8597e1fadf128c2ab47677f6f6a6a2f106f3135a57
-
SSDEEP
6144:SvjdgmYsNbVgToXbB0A9dCBofoDfqmrEWeJXWkcl6FYLE58ZCDYGvwl:SR9FNbVgT+90A94BpGmrEWehio5HYw
Malware Config
Signatures
Files
-
95f02d8ffc52d802071b02312b290d4518a0002bfcae84705e817ec13cca21c5.exe windows x86
3bdf4a973f1a20a1d04436514fd301c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindClose
CloseHandle
GetCurrentThread
GlobalLock
DeviceIoControl
GetFileAttributesW
GetModuleHandleA
GetCurrentProcess
LocalFlags
SetLastError
SetCommBreak
GetPrivateProfileIntA
GetStringTypeA
HeapFree
RemoveDirectoryW
CreateDirectoryW
CreateEventA
GetFileAttributesW
GetVersionExA
VirtualProtectEx
GetPrivateProfileSectionA
user32
LoadCursorA
DispatchMessageA
PostMessageW
IsWindow
SetFocus
IsZoomed
PeekMessageW
GetWindowTextW
DefDlgProcA
GetWindowLongW
wsprintfW
IsDialogMessageA
SetCursorPos
msorcl32
SQLConnect
SQLCancel
SQLDisconnect
SQLError
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE