Static task
static1
Behavioral task
behavioral1
Sample
98ae1ab98f83253a46707362fb02ba91d5282a6f764dca725f4d61139c335832.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98ae1ab98f83253a46707362fb02ba91d5282a6f764dca725f4d61139c335832.exe
Resource
win10v2004-20221111-en
General
-
Target
98ae1ab98f83253a46707362fb02ba91d5282a6f764dca725f4d61139c335832
-
Size
56KB
-
MD5
850ed2730466113a68e83a805ad540c3
-
SHA1
5c4884dd38c80af43d82901da300c8a386afd01d
-
SHA256
98ae1ab98f83253a46707362fb02ba91d5282a6f764dca725f4d61139c335832
-
SHA512
194e7e8596db945882f19024fae6612d4321d468e3a576920be76d329d4962e49be21b3850c893a8c02ff971c4b925275e4f4b069e4acd0d063173ae772066b2
-
SSDEEP
768:BYZbZ36DWon57JpPm8W2h0J/LqYF58t37dGnweAJANs9DUDsK7XgvHBK2IAHkvJc:BYRZ2fn57Js8WqGzKkkvCFgPBUE
Malware Config
Signatures
Files
-
98ae1ab98f83253a46707362fb02ba91d5282a6f764dca725f4d61139c335832.exe windows x86
1a6b3afb643f6b33d8f832e226948e7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EndUpdateResourceA
GetExitCodeProcess
GetLogicalDrives
GetBinaryTypeA
lstrcmpiA
GetDriveTypeA
CreateNamedPipeA
lstrlenA
GetPrivateProfileStringW
lstrcmpiA
HeapCreate
lstrcmpiA
TlsFree
FileTimeToLocalFileTime
GetStdHandle
Sleep
GetModuleHandleA
CreateWaitableTimerW
GetTickCount
IsValidCodePage
lstrcmpiA
lstrcmpiA
SetLastError
odbccp32
SQLInstallDriver
SQLGetTranslator
SQLGetInstalledDrivers
SQLConfigDataSource
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ