Static task
static1
Behavioral task
behavioral1
Sample
307680f7fd5bd0e5828ed3d52450300b27acc575d3d62a6110a81a691a5cab56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
307680f7fd5bd0e5828ed3d52450300b27acc575d3d62a6110a81a691a5cab56.exe
Resource
win10v2004-20221111-en
General
-
Target
307680f7fd5bd0e5828ed3d52450300b27acc575d3d62a6110a81a691a5cab56
-
Size
106KB
-
MD5
48d3bf05a73a55954c2039bf11dfa124
-
SHA1
64c96b327a5594a77b20dcc6d1ca4b23d098725f
-
SHA256
307680f7fd5bd0e5828ed3d52450300b27acc575d3d62a6110a81a691a5cab56
-
SHA512
967fe52bd22572dfcaa6a43003b2e529bedb602b93c7790a0ca848380df51e1b947a6f4651049fb9960439617103247e42d349bad825370b19faed374a2062b7
-
SSDEEP
1536:rBpof24LqWkntFFUx4oDiSxVkw475f7IiYFfmdnU70Er4BvHQK:rBifeWaF0qSxu79YlmdO0E8BvP
Malware Config
Signatures
Files
-
307680f7fd5bd0e5828ed3d52450300b27acc575d3d62a6110a81a691a5cab56.exe windows x86
5610c5b530138865117b260e5ca145b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FreeConsole
ExitProcess
user32
IsWindow
MessageBoxW
GetForegroundWindow
comdlg32
ReplaceTextW
FindTextA
ChooseColorA
PageSetupDlgW
ChooseFontW
setupapi
SetupGetLineTextW
SetupDiGetDriverInfoDetailA
SetupQueueDeleteSectionA
SetupDiGetDeviceInfoListDetailA
SetupQueryInfFileInformationA
SetupDiGetSelectedDriverW
SetupDiGetINFClassW
SetupDiGetDeviceInterfaceDetailA
SetupDiOpenDeviceInterfaceA
SetupDiRegisterCoDeviceInstallers
SetupDiInstallClassW
SetupScanFileQueueA
SetupQueueDefaultCopyW
SetupDiBuildClassInfoListExA
SetupDiInstallClassExA
SetupQueueDefaultCopyA
SetupInstallFilesFromInfSectionA
esent
JetSetCurrentIndex3
JetAttachDatabase
JetSetCurrentIndex
JetGetTableInfo
JetGetIndexInfo
JetDupSession
JetGetVersion
JetGetLock
JetTerm2
JetRestore2
JetTruncateLog
JetOpenFile
JetMove
JetGetCursorInfo
JetRenameTable
JetBeginTransaction
JetUpdate
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tnr Size: 58KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ