Static task
static1
Behavioral task
behavioral1
Sample
016efbb49ef8aaab47bfdc5eafc25c54bbf6bb534c4f59e381760405880bedc8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
016efbb49ef8aaab47bfdc5eafc25c54bbf6bb534c4f59e381760405880bedc8.exe
Resource
win10v2004-20220812-en
General
-
Target
016efbb49ef8aaab47bfdc5eafc25c54bbf6bb534c4f59e381760405880bedc8
-
Size
834KB
-
MD5
b7218bead2e22c8f26025c3f282b60a0
-
SHA1
9e5d2629f3134060c32af4672c9bfa4307ba1dfd
-
SHA256
016efbb49ef8aaab47bfdc5eafc25c54bbf6bb534c4f59e381760405880bedc8
-
SHA512
b86cc69277db2d4638f3c50f215b4d8758f4e284712888b3040e1983a05b405d2a3fb8fb1a27ede922d06aee599b4556760bb2ed4d4e60c8c38778748823f252
-
SSDEEP
12288:b+jIbWfGG6m1fRJEReGNgntB/WQGTqGekmHjY7DQ2oKM/TXmCzkWOtP:ikb4p1f3ERDNgf/WKGjGatZGzj+
Malware Config
Signatures
Files
-
016efbb49ef8aaab47bfdc5eafc25c54bbf6bb534c4f59e381760405880bedc8.exe windows x86
24b041868b275cb4345da4dec2d34d7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mscat32
CatalogCompactHashDatabase
odbctrac
FireVSDebugEvent
TraceCloseLogFile
TraceOpenLogFile
TraceReturn
TraceSQLAllocConnect
TraceSQLAllocEnv
TraceSQLAllocHandle
TraceSQLAllocHandleStd
TraceSQLAllocHandleStdW
TraceSQLAllocStmt
TraceSQLBindCol
TraceSQLBindParam
TraceSQLBindParameter
TraceSQLBrowseConnect
TraceSQLBrowseConnectW
TraceSQLBulkOperations
TraceSQLCancel
TraceSQLCloseCursor
TraceSQLColAttribute
TraceSQLColAttributeW
TraceSQLColAttributes
TraceSQLColAttributesW
TraceSQLColumnPrivileges
TraceSQLColumnPrivilegesW
TraceSQLColumns
TraceSQLColumnsW
TraceSQLConnect
TraceSQLConnectW
TraceSQLCopyDesc
TraceSQLDataSources
TraceSQLDataSourcesW
kernel32
GetTimeFormatW
FreeConsole
GetSystemDirectoryW
AreFileApisANSI
IsBadCodePtr
GetStringTypeA
GetStringTypeExA
GetStringTypeExW
GetStringTypeW
ClearCommError
_lopen
ClearCommBreak
_lread
avifil32
AVIBuildFilter
AVIBuildFilterA
AVIBuildFilterW
AVIClearClipboard
AVIFileAddRef
AVIFileCreateStream
AVIFileCreateStreamA
AVIFileCreateStreamW
osuninst
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
RemoveUninstallImage
Sections
.text Size: 29KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 774KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolit Size: 5KB - Virtual size: 8KB