Static task
static1
Behavioral task
behavioral1
Sample
5c4963ca1f14f4745cf792593151633b0fb42febc6688c8efade413ca8b233e9.exe
Resource
win7-20220901-en
General
-
Target
5c4963ca1f14f4745cf792593151633b0fb42febc6688c8efade413ca8b233e9
-
Size
111KB
-
MD5
0f96aba13778a3b02d3d56207221b009
-
SHA1
3cbd4f92d1f37091ef94c523ea0a8ba6e7edb9ca
-
SHA256
5c4963ca1f14f4745cf792593151633b0fb42febc6688c8efade413ca8b233e9
-
SHA512
a5bd75a9eca2a05171912fab3024df9ba75cf92d6db7bcf038a747fee01dca0994291ecf278e414a8905abe5ecbdfc1ee00a07f75bcbb4e03fd81e07adadeead
-
SSDEEP
3072:SeXs+7Y5CkoGc1W0fWhXItPy8UU+aXhPE:/sChGclfeGPv8
Malware Config
Signatures
Files
-
5c4963ca1f14f4745cf792593151633b0fb42febc6688c8efade413ca8b233e9.exe windows x86
351743dfd096dbc154812a9f18914a22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
HeapCreate
GetDriveTypeA
Sleep
lstrcmpiA
lstrcmpiA
CreateWaitableTimerW
IsValidCodePage
SetLastError
EndUpdateResourceW
GetStdHandle
FileTimeToLocalFileTime
lstrcmpiA
lstrlenA
GetPrivateProfileStringW
TlsFree
lstrcmpiA
GetTickCount
CreateNamedPipeA
GetModuleHandleA
lstrcmpiA
GetBinaryTypeW
GetExitCodeProcess
odbccp32
SQLGetTranslator
SQLConfigDataSource
SQLInstallDriver
SQLGetInstalledDrivers
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 631B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ