Static task
static1
Behavioral task
behavioral1
Sample
DSQLTools_v2.32_ư/DSQLTools.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
DSQLTools_v2.32_ư/DSQLTools.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
֮˵.html
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
֮˵.html
Resource
win10v2004-20221111-en
General
-
Target
791685a20f3c4d6f7bfb1c3ead26a3da07f89dde03a815ff2671e7dd15468934
-
Size
689KB
-
MD5
8cb3dada7f619905109e9521d7bf9a56
-
SHA1
d7cdeaf4ee3bf198535a0353da8301b091f4b6a9
-
SHA256
791685a20f3c4d6f7bfb1c3ead26a3da07f89dde03a815ff2671e7dd15468934
-
SHA512
9b7c8a784089a142adc777a7ea67a31419a0bcab30b54d8b3f90de53f398ec926eb8ee3f979c9c1b299245f9f2c7c93fd8ae6ce757d954e03044525e8743bb36
-
SSDEEP
12288:f1sCN86o80Pi0dmUK2wNxO2I9ntv3nkcGKZW4TsvFxLriXq:f1sG98bxwTOZv+KZTsfWXq
Malware Config
Signatures
Files
-
791685a20f3c4d6f7bfb1c3ead26a3da07f89dde03a815ff2671e7dd15468934.zip
-
DSQLTools_v2.32_ư/D99.mdb
-
DSQLTools_v2.32_ư/DSQLTools.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ASPACK Size: 972KB - Virtual size: 972KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPACK Size: 500KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xPfOx Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ʹ˵.txt
-
֮˵.html