Static task
static1
Behavioral task
behavioral1
Sample
66bb81cfdd64f0264ac40c74abd9548df101d47a48a8adae00273b0101926e3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66bb81cfdd64f0264ac40c74abd9548df101d47a48a8adae00273b0101926e3f.exe
Resource
win10v2004-20220812-en
General
-
Target
66bb81cfdd64f0264ac40c74abd9548df101d47a48a8adae00273b0101926e3f
-
Size
168KB
-
MD5
6635d0494770be5babe3ef024d2ed5e0
-
SHA1
1bb14d064dc68592cb5f1e2640eb83b9d9ba6c92
-
SHA256
66bb81cfdd64f0264ac40c74abd9548df101d47a48a8adae00273b0101926e3f
-
SHA512
a74fc4ae374384fb20369f3b5c221562a8a03e01647fb1623fe93326b520aafea754de461ff945a2c2907c5ce73fdd480a8e848a994910c1c5819b6c1dcf6c6a
-
SSDEEP
3072:089uHH2nijnE+lOa/YSkZMEjqrC2D2egbkyi8u8ZFC95AZGo:089eH2GnEFa/08bgoyXhFG0F
Malware Config
Signatures
Files
-
66bb81cfdd64f0264ac40c74abd9548df101d47a48a8adae00273b0101926e3f.exe windows x86
5daa260d34009d547bf03d17b02c9837
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
strlen
strcpy
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
WideCharToMultiByte
WriteFile
CloseHandle
ReadFile
HeapReAlloc
user32
CallWindowProcA
odbc32
SQLDataSources
SQLFreeHandle
SQLAllocHandle
SQLDisconnect
SQLNumResultCols
SQLFetchScroll
SQLGetData
SQLFetch
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE