Static task
static1
Behavioral task
behavioral1
Sample
a2552b8b05930f5d44ad75543c747a4d97c980271169038cab06c9e243831ff0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2552b8b05930f5d44ad75543c747a4d97c980271169038cab06c9e243831ff0.exe
Resource
win10v2004-20221111-en
General
-
Target
a2552b8b05930f5d44ad75543c747a4d97c980271169038cab06c9e243831ff0
-
Size
300KB
-
MD5
970a1276f76473f47dd3adc1f34f5199
-
SHA1
d2eebb0f31fc10097a1e17a5470f57330407f6ab
-
SHA256
a2552b8b05930f5d44ad75543c747a4d97c980271169038cab06c9e243831ff0
-
SHA512
5aa544d087a6f2f21a2d6cfdaa5b14de987f9e79d6a3789f87710a539211bc94491f795a12134c57ca3724496d52025ac6cf0a523ef18fe41e23b1c572b0625a
-
SSDEEP
6144:YrsgVPod7T6RgPl56a77oD2ec+S/7LlPKEwbdw+OYmNp4yFmzTjvc:YYgxg72Yn7oDfLMLJKHbe+OYmNp4ycv
Malware Config
Signatures
Files
-
a2552b8b05930f5d44ad75543c747a4d97c980271169038cab06c9e243831ff0.exe windows x86
457f01f645d65cd83c81cd6e4718a171
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
lstrcmpiA
GetModuleHandleA
Sleep
GetTickCount
TlsFree
GetPrivateProfileStringW
GetExitCodeProcess
lstrcmpiA
lstrcmpiA
CreateWaitableTimerW
GetStdHandle
IsValidCodePage
GetLogicalDrives
FileTimeToLocalFileTime
HeapCreate
lstrcmpiA
CreateNamedPipeA
SetLastError
lstrcmpiA
lstrlenA
GetBinaryTypeW
EndUpdateResourceW
odbccp32
SQLGetTranslator
SQLGetInstalledDrivers
SQLConfigDataSource
SQLInstallDriver
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 631B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ