Static task
static1
Behavioral task
behavioral1
Sample
2f9f82697e48cde20c3bd4a7233395bb06acbc168bb94b615cda7a602abb7725.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f9f82697e48cde20c3bd4a7233395bb06acbc168bb94b615cda7a602abb7725.exe
Resource
win10v2004-20221111-en
General
-
Target
2f9f82697e48cde20c3bd4a7233395bb06acbc168bb94b615cda7a602abb7725
-
Size
300KB
-
MD5
bbf03dbdaee53cda1f3e274b5227aaeb
-
SHA1
29841de4dbbb99ee353f7f1730f5cac164eef834
-
SHA256
2f9f82697e48cde20c3bd4a7233395bb06acbc168bb94b615cda7a602abb7725
-
SHA512
c65eadfba3bbe2c3dfca3fe9005801808802e7411c5f24817abba27578cfcd14bf295f4b2033ac4549003de479af630b975587cffb112213337137a4fe58c2d9
-
SSDEEP
6144:Y7tFVPodYIcnIM8L3HV290zcDTt+FrWpk63OT3PTlj/CxxuEcxX:wtFxg5M8jY9DTt+xWHMOu
Malware Config
Signatures
Files
-
2f9f82697e48cde20c3bd4a7233395bb06acbc168bb94b615cda7a602abb7725.exe windows x86
7945559b8cec5a700867be03fc1f89d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetExitCodeProcess
GetStdHandle
lstrcmpiA
FileTimeToLocalFileTime
IsValidCodePage
SetLastError
GetBinaryTypeA
GetDriveTypeA
lstrcmpiA
TlsFree
GetModuleHandleA
lstrcmpiA
GetTickCount
lstrcmpiA
CreateWaitableTimerW
HeapCreate
lstrcmpiA
CreateNamedPipeA
EndUpdateResourceA
lstrlenA
GetLogicalDrives
GetPrivateProfileStringW
odbccp32
SQLInstallDriver
SQLConfigDataSource
SQLGetInstalledDrivers
SQLGetTranslator
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ