Static task
static1
Behavioral task
behavioral1
Sample
5a6c5f4524832fe73cdcdf7acd4b75add76dd59f3e13620da5a1ce1c70efbde7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a6c5f4524832fe73cdcdf7acd4b75add76dd59f3e13620da5a1ce1c70efbde7.exe
Resource
win10v2004-20221111-en
General
-
Target
5a6c5f4524832fe73cdcdf7acd4b75add76dd59f3e13620da5a1ce1c70efbde7
-
Size
239KB
-
MD5
f3d1212520cd291f11e348d17cf9a0f7
-
SHA1
a158fade43f24824382916c9aee40bf9519d8ad3
-
SHA256
5a6c5f4524832fe73cdcdf7acd4b75add76dd59f3e13620da5a1ce1c70efbde7
-
SHA512
d2c096882931015ef26d9b34e42b18a5aded80ba91e03cac3737ec7f3fe712e209928824a156e9be5df6b042c932f9279d3d676f90f0bae031babafe7f155b98
-
SSDEEP
6144:5dip8f27zrufU2wDuHMzW47NjRK9IRUi8i:5de8fiwU20r8i
Malware Config
Signatures
Files
-
5a6c5f4524832fe73cdcdf7acd4b75add76dd59f3e13620da5a1ce1c70efbde7.exe windows x86
e026cd8710bf6b644ba7bf70836996f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SetLastError
WriteConsoleW
GetCurrentProcessId
GlobalFindAtomA
FindFirstVolumeW
GetTickCount
GenerateConsoleCtrlEvent
odbccr32
SQLMoreResults
SQLRowCount
ReleaseCLStmtResources
SQLPrepare
msdtcprx
DTC_XaRecover
?InstallDtcClient@@YGJPAGKK@Z
ContactToNameObject
DllGetTransactionManagerCore
DTC_XaClose
DTC_XaForget
DTC_XaOpen
?GetDtcLogPath@@YGHKPAG@Z
DTC_XaComplete
DTC_XaStart
DTC_XaRollback
dnsapi
Dns_CreateMulticastSocket
DnsGetCacheDataTable
DnsQueryExW
NetInfo_ResetServerPriorities
DnsNotifyResolver
Dns_ResetNetworkInfo
DnsReplaceRecordSetUTF8
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ