Static task
static1
Behavioral task
behavioral1
Sample
31cc0f4af342ac2d34d5960571c0d1774dde19d5e7e5e869ccdfd6f53eb93b3c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
31cc0f4af342ac2d34d5960571c0d1774dde19d5e7e5e869ccdfd6f53eb93b3c.exe
Resource
win10v2004-20221111-en
General
-
Target
31cc0f4af342ac2d34d5960571c0d1774dde19d5e7e5e869ccdfd6f53eb93b3c
-
Size
495KB
-
MD5
95ff5f10caf3a9e5a7ee1a559190a6d4
-
SHA1
443b7e85639823f7b9050299e1208074bfdc0d16
-
SHA256
31cc0f4af342ac2d34d5960571c0d1774dde19d5e7e5e869ccdfd6f53eb93b3c
-
SHA512
f3ed9b3e0232523fe0624fc714ba678731dacb16bfd6adbdecae2b41a597146eadd0a3a966bf244baa00a8ecb4e18dddb81d89face42cc5e01e0d5cfff49de3c
-
SSDEEP
12288:xWIU4UzpDJLbArJuEz+Wj9aiMmvXLYLbZyz:Uz2daN7Y7+4
Malware Config
Signatures
Files
-
31cc0f4af342ac2d34d5960571c0d1774dde19d5e7e5e869ccdfd6f53eb93b3c.exe windows x86
cb2ca1990b45087afcf825ad14447891
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
HeapCreate
GetExitCodeProcess
GetDriveTypeA
GetModuleHandleA
GetBinaryTypeA
TlsFree
lstrcmpiA
SetLastError
EndUpdateResourceA
lstrcmpiA
lstrlenA
lstrcmpiA
GetTickCount
GetPrivateProfileStringW
IsValidCodePage
GetStdHandle
lstrcmpiA
lstrcmpiA
CreateWaitableTimerW
Sleep
FileTimeToLocalFileTime
CreateNamedPipeA
odbccp32
SQLInstallDriver
SQLConfigDataSource
SQLGetInstalledDrivers
SQLGetTranslator
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ