Static task
static1
Behavioral task
behavioral1
Sample
32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693.exe
Resource
win10v2004-20221111-en
General
-
Target
32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693
-
Size
420KB
-
MD5
00b4f11a2ac8c671ffb38aa98238a35c
-
SHA1
865309f7f38fbc96b195b61c9b620fad9afbcc84
-
SHA256
32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693
-
SHA512
1228fb91397aae6bd9ba8c50ea8752443c398d3ce1b11ff4f5c8bd727e5870ba068872b808f8d9084e5230122e0bd3e40a9087892b148ed2bb1d9c536ada0a4f
-
SSDEEP
12288:utllTmnAdRLB4ENDV77rtIARcY3rHuJnm:utlQAJNx7VIiuJnm
Malware Config
Signatures
Files
-
32680c967214f4f59f5a45431f2fc04646967dbba114220eacfc8cd0583d7693.exe windows x86
786d9cfb440a888704f471a9d974b2dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
libmysql
mysql_close
mysql_init
mysql_query
mysql_insert_id
mysql_select_db
mysql_error
mysql_store_result
mysql_num_rows
mysql_fetch_row
mysql_real_connect
mysql_options
mysql_ping
mysql_free_result
kernel32
GetOEMCP
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
GetCPInfo
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetErrorMode
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
WritePrivateProfileStringA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
lstrcmpA
CreateEventA
GetCurrentThreadId
SetThreadPriority
CloseHandle
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersion
CompareStringA
MultiByteToWideChar
CompareStringW
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetTickCount
SetLastError
LocalFree
FormatMessageA
lstrcmpiA
SetConsoleCtrlHandler
lstrlenA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
InterlockedExchange
WaitForSingleObject
SuspendThread
ResumeThread
GetFileAttributesA
InitializeCriticalSection
EnterCriticalSection
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
GetLocalTime
GetCurrentProcess
SetProcessWorkingSetSize
SetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
RaiseException
user32
UnregisterClassA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessagePos
MapWindowPoints
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowPos
SetCursor
PostQuitMessage
DestroyWindow
IsWindow
GetDlgItem
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterClipboardFormatA
SetWindowsHookExA
CallNextHookEx
GetMessageTime
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
WaitMessage
PostMessageA
PeekMessageA
DispatchMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
SendMessageA
IsIconic
LoadIconA
EnableWindow
GetClientRect
CharUpperA
PostThreadMessageA
SetTimer
KillTimer
GetMenu
gdi32
DeleteDC
GetStockObject
RestoreDC
SaveDC
ExtTextOutA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
UnlockServiceDatabase
LockServiceDatabase
EnumServicesStatusA
DeleteService
CreateServiceA
QueryServiceConfigA
ControlService
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenSCManagerA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegFlushKey
RegDeleteKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
QueryServiceStatus
CloseServiceHandle
OpenServiceA
shlwapi
PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA
ole32
CoInitialize
oleaut32
VariantInit
VariantChangeType
VariantClear
ws2_32
socket
select
gethostbyname
htonl
htons
inet_addr
bind
WSAGetLastError
accept
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
closesocket
WSACleanup
inet_ntoa
ntohs
WSAStartup
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ