Static task
static1
Behavioral task
behavioral1
Sample
6646802624e35b45bc4b28f534c79439c70364bab0c027faf3f0bd9bacc643d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6646802624e35b45bc4b28f534c79439c70364bab0c027faf3f0bd9bacc643d3.exe
Resource
win10v2004-20220812-en
General
-
Target
6646802624e35b45bc4b28f534c79439c70364bab0c027faf3f0bd9bacc643d3
-
Size
834KB
-
MD5
d4c15d9189920ea97387f306ceaa38ad
-
SHA1
84bf9b30492a14f6300c78439b728f634e6813c6
-
SHA256
6646802624e35b45bc4b28f534c79439c70364bab0c027faf3f0bd9bacc643d3
-
SHA512
ee33213a869fdd6e34a1320ddc19a85efdd3aeafafa6ae0899cc40ca58b6ef50db87abdd1be001fdf354e9c97dd4e3e1d237b9785e83d9d6319c7768ec904af1
-
SSDEEP
12288:b+jIbWfGG6m1fRJEReGNgntB/WQGTqGekmHjY7DQ2oKM/TXmCzkWOtP:ikb4p1f3ERDNgf/WKGjGatZGzj+
Malware Config
Signatures
Files
-
6646802624e35b45bc4b28f534c79439c70364bab0c027faf3f0bd9bacc643d3.exe windows x86
24b041868b275cb4345da4dec2d34d7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mscat32
CatalogCompactHashDatabase
odbctrac
FireVSDebugEvent
TraceCloseLogFile
TraceOpenLogFile
TraceReturn
TraceSQLAllocConnect
TraceSQLAllocEnv
TraceSQLAllocHandle
TraceSQLAllocHandleStd
TraceSQLAllocHandleStdW
TraceSQLAllocStmt
TraceSQLBindCol
TraceSQLBindParam
TraceSQLBindParameter
TraceSQLBrowseConnect
TraceSQLBrowseConnectW
TraceSQLBulkOperations
TraceSQLCancel
TraceSQLCloseCursor
TraceSQLColAttribute
TraceSQLColAttributeW
TraceSQLColAttributes
TraceSQLColAttributesW
TraceSQLColumnPrivileges
TraceSQLColumnPrivilegesW
TraceSQLColumns
TraceSQLColumnsW
TraceSQLConnect
TraceSQLConnectW
TraceSQLCopyDesc
TraceSQLDataSources
TraceSQLDataSourcesW
kernel32
GetTimeFormatW
FreeConsole
GetSystemDirectoryW
AreFileApisANSI
IsBadCodePtr
GetStringTypeA
GetStringTypeExA
GetStringTypeExW
GetStringTypeW
ClearCommError
_lopen
ClearCommBreak
_lread
avifil32
AVIBuildFilter
AVIBuildFilterA
AVIBuildFilterW
AVIClearClipboard
AVIFileAddRef
AVIFileCreateStream
AVIFileCreateStreamA
AVIFileCreateStreamW
osuninst
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
Sections
.text Size: 29KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 774KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolit Size: 5KB - Virtual size: 8KB