Static task
static1
Behavioral task
behavioral1
Sample
0d85ff5e034e460484053809a46ab69cc8d45dee9ca52c69b04eef2d4d35b714.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0d85ff5e034e460484053809a46ab69cc8d45dee9ca52c69b04eef2d4d35b714.exe
Resource
win10v2004-20220812-en
General
-
Target
0d85ff5e034e460484053809a46ab69cc8d45dee9ca52c69b04eef2d4d35b714
-
Size
312KB
-
MD5
1232ba84617594ef56cd49f048dc2993
-
SHA1
dace063b1f54b99a49f9ee143cfba7827672b07f
-
SHA256
0d85ff5e034e460484053809a46ab69cc8d45dee9ca52c69b04eef2d4d35b714
-
SHA512
30ebb7053a24289cd680c9fcfaa787fe11092668dd46fea8b7d3f922a5eb94ac9fdfa73ad82f0138a5be7e7bed4b4c49d9f852286d56bf11b8784c8fef6ec858
-
SSDEEP
6144:NCDF3WLMpD2F3/YPXDktnoAfousun2Zgg/v2a/eFmpb:yFWLMd21ALktnoGXsun2Kg/H/ecb
Malware Config
Signatures
Files
-
0d85ff5e034e460484053809a46ab69cc8d45dee9ca52c69b04eef2d4d35b714.exe windows x86
82627490859a96173613c6374be84862
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
DeleteFileA
DeviceIoControl
OpenMutexA
GetStdHandle
HeapFree
LoadLibraryA
GetDriveTypeA
GetFileAttributesA
GetPrivateProfileIntW
DeviceIoControl
CloseHandle
HeapDestroy
LocalLock
GetStringTypeA
CreateEventW
GetPrivateProfileSectionA
GetCurrentProcess
VirtualProtectEx
FindVolumeClose
GetCurrentThread
shell32
SHGetSettings
DragAcceptFiles
ExtractIconA
ShellMessageBoxA
StrChrA
DllUnregisterServer
DragFinish
DuplicateIcon
SHFree
SHGetMalloc
DragQueryFileA
SHGetMalloc
ShellAboutA
odbccp32
SQLInstallODBC
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ