Static task
static1
Behavioral task
behavioral1
Sample
f52a023dc018226ef07466d723388438620b844511f7a14cabf222ff3ada05ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f52a023dc018226ef07466d723388438620b844511f7a14cabf222ff3ada05ff.exe
Resource
win10v2004-20220901-en
General
-
Target
f52a023dc018226ef07466d723388438620b844511f7a14cabf222ff3ada05ff
-
Size
646KB
-
MD5
09ce13fac7587003538ca3ef04d862ff
-
SHA1
94ca0fdbb3513c77cebeabdbe59bd33fa919823d
-
SHA256
f52a023dc018226ef07466d723388438620b844511f7a14cabf222ff3ada05ff
-
SHA512
917292f7bf0f2df4cd701d93cd03ceba3c4a3b61755fa63ef08dc57d772712bfc7704c7284ca00273a0af3df920d4c09024a6a37f17aa040ec1cf9893e6ec622
-
SSDEEP
12288:vTHjY+8HNKESCovc6rET4Rg2xlUpvw0KOe6lqqvn3+FKdGT:vTHtyBovc6ogmpvwyfG9
Malware Config
Signatures
Files
-
f52a023dc018226ef07466d723388438620b844511f7a14cabf222ff3ada05ff.exe windows x86
b882510326c0e33dacf27dccd9b877ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
msasn1
ASN1BERDecBitString
odbccp32
ODBCCPlApplet
SQLConfigDataSource
SQLConfigDataSourceW
SQLConfigDriver
SQLConfigDriverW
SQLCreateDataSource
SQLCreateDataSourceEx
SQLCreateDataSourceExW
SQLCreateDataSourceW
SQLGetAvailableDrivers
SQLGetAvailableDriversW
SQLGetConfigMode
SQLGetInstalledDrivers
SQLGetInstalledDriversW
SQLGetPrivateProfileString
SQLGetPrivateProfileStringW
SQLGetTranslator
SQLGetTranslatorW
SQLInstallDriver
SQLInstallDriverEx
SQLInstallDriverExW
SQLInstallDriverManager
SQLInstallDriverManagerW
SQLInstallDriverW
SQLInstallODBC
SQLInstallODBCW
SQLInstallTranslator
SQLInstallTranslatorEx
SQLInstallTranslatorExW
SQLInstallTranslatorW
SQLInstallerError
kernel32
CallNamedPipeA
GetTickCount
GetWindowsDirectoryA
GetCommTimeouts
FindAtomW
HeapReAlloc
HeapSetInformation
HeapSize
HeapSummary
GlobalFindAtomW
_lopen
ReleaseMutex
ReadFile
ntdll
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateJobObject
NtCreateJobSet
NtCreateKey
NtCreateMutant
nddeapi
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
NDdeGetErrorStringA
Sections
.text Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 158KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 586KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolit Size: 5KB - Virtual size: 8KB