Static task
static1
Behavioral task
behavioral1
Sample
ef683d1c70e164225ed0d112ca6a191aaad1195ae9b54a30338c6b5cb6cdfe16.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef683d1c70e164225ed0d112ca6a191aaad1195ae9b54a30338c6b5cb6cdfe16.exe
Resource
win10v2004-20221111-en
General
-
Target
ef683d1c70e164225ed0d112ca6a191aaad1195ae9b54a30338c6b5cb6cdfe16
-
Size
798KB
-
MD5
5624f9dc04c3863fb5b573bcefaa99c2
-
SHA1
96ac1af0085deef5e30b124d1f3dd9edbb845eae
-
SHA256
ef683d1c70e164225ed0d112ca6a191aaad1195ae9b54a30338c6b5cb6cdfe16
-
SHA512
9aea2ddef861afa7802afd11405d6a48c9fea1ccbd3a576fb940ab3049aecbebb1d1f66cdddfd79ee63ba82875580f0de364d5caece9d4ae069fe3dfc763f472
-
SSDEEP
12288:SKvx6NuQEvBQs2yXfhgrm19OvD8s5CDjywgAsYFKzrpRjjMhVtvjnaRswZ0F/:SKJcuzBQsrfOrq9OblexjaRjjMcmwO
Malware Config
Signatures
Files
-
ef683d1c70e164225ed0d112ca6a191aaad1195ae9b54a30338c6b5cb6cdfe16.exe windows x86
d5351bb3002add3b69abc0a2cbdb14f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetCurrentThread
GetStringTypeA
GetPrivateProfileIntW
DeleteFileA
FindVolumeClose
CreateEventA
VirtualProtectEx
DeviceIoControl
HeapFree
GetDriveTypeA
GetCurrentProcess
GetFileAttributesA
GetPrivateProfileSectionA
lstrlenA
GetVersionExA
LoadLibraryA
LocalLock
GetStdHandle
HeapDestroy
OpenMutexA
shell32
DragFinish
ShellMessageBoxA
StrChrA
DragQueryFileA
DllUnregisterServer
SHGetMalloc
DuplicateIcon
DragAcceptFiles
ShellAboutA
SHGetMalloc
SHFree
SHGetSettings
ExtractIconA
odbccp32
SQLInstallODBC
SQLInstallDriver
SQLGetAvailableDrivers
SQLConfigDataSource
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ