Static task
static1
Behavioral task
behavioral1
Sample
402c752bf15c5f308a945e37d60df5292c0706fd2d32a99e87790d2b73f41216.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
402c752bf15c5f308a945e37d60df5292c0706fd2d32a99e87790d2b73f41216.exe
Resource
win10v2004-20221111-en
General
-
Target
402c752bf15c5f308a945e37d60df5292c0706fd2d32a99e87790d2b73f41216
-
Size
300KB
-
MD5
798c7a3a7f10612215305417e991abaa
-
SHA1
61c3eb2e3c5f3b6911142324d4d01f5ec7e013df
-
SHA256
402c752bf15c5f308a945e37d60df5292c0706fd2d32a99e87790d2b73f41216
-
SHA512
91179b16a8fda8d0b6f23e94507f777ab637cd328baac4f1c59c01adbfb7fbe692369e77929dc77991f60ffd11d19cdb015987dbdc101f04fdcfba8690bd98f7
-
SSDEEP
6144:bL9VPod+FKNaHwB0h+FdZ8/4TgikPopkVIEPw4jVtE1:txgcKNqwB0sdK/4TgLfuEPw481
Malware Config
Signatures
Files
-
402c752bf15c5f308a945e37d60df5292c0706fd2d32a99e87790d2b73f41216.exe windows x86
6f65b4f1c591125d3c058d114d211be3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
FileTimeToLocalFileTime
CreateWaitableTimerW
HeapCreate
EndUpdateResourceA
GetTickCount
GetBinaryTypeA
lstrcmpiA
GetLogicalDrives
lstrcmpiA
CreateNamedPipeA
Sleep
TlsFree
GetExitCodeProcess
lstrcmpiA
lstrcmpiA
lstrcmpiA
lstrlenA
SetLastError
GetDriveTypeA
GetModuleHandleA
GetStdHandle
IsValidCodePage
odbccp32
SQLGetInstalledDrivers
SQLGetTranslator
SQLConfigDataSource
SQLInstallDriver
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ