Static task
static1
Behavioral task
behavioral1
Sample
9c7c425bd45c88ce998f31f74358dce84da114432c0f1ef3d692879a61e795e3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c7c425bd45c88ce998f31f74358dce84da114432c0f1ef3d692879a61e795e3.exe
Resource
win10v2004-20220901-en
General
-
Target
9c7c425bd45c88ce998f31f74358dce84da114432c0f1ef3d692879a61e795e3
-
Size
81KB
-
MD5
620d9f4e3b5e09ac411a5604a3f1550f
-
SHA1
fc35e13be24450ae96ce6842c641618b93236398
-
SHA256
9c7c425bd45c88ce998f31f74358dce84da114432c0f1ef3d692879a61e795e3
-
SHA512
bb6ae79c82f0375831059771e85dc43949517d45ae22aeb07b181843c29164a23d89a117a93a65a370ac299ef5d2f3dd73dfde893b2b6ba70ce3b22bf0ad4259
-
SSDEEP
1536:xYAL/i9Wu0CEpf04fUmrvbgwv1mOo6WuXeM5WPkEon+n6R9/1tAMsiZxhH2t:S39WVZpVwcxo6VXeMAMXbRJNsKH2t
Malware Config
Signatures
Files
-
9c7c425bd45c88ce998f31f74358dce84da114432c0f1ef3d692879a61e795e3.exe windows x86
5fbdbe68918b055ab82f21c1b696c462
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_daylight
__p__commode
_strdup
_unlock
__set_app_type
_wspawnlpe
_mbscpy
_mbsspn
fgetpos
gets
_wexecv
_set_sbh_threshold
__getmainargs
_beginthread
_ismbbkpunct
__p__environ
strcmp
_local_unwind2
__winitenv
_wsopen
__lconv_init
_ungetch
strtod
towupper
_wexeclp
_fpreset
_wsplitpath
_wtof
_itoa
srand
odbc32
SQLDescribeParam
SQLDescribeColA
SQLExtendedFetch
SQLSetDescRec
SQLBulkOperations
SQLGetConnectAttr
SQLPutData
SQLColumnPrivilegesA
SQLPrepareW
g_hHeapMalloc
SQLDataSourcesW
SQLFreeStmt
SQLGetConnectAttrA
SQLConnectA
SQLDriversA
SQLSpecialColumnsW
SQLSetStmtAttrW
SQLProcedures
SQLGetDiagFieldA
SQLProcedureColumnsA
SQLTablesA
SQLExecute
SQLGetDiagFieldW
SQLColAttributesA
ODBCGetTryWaitValue
SQLForeignKeysA
SQLSetConnectAttrA
kernel32
_lclose
GetSystemPowerStatus
GetStringTypeW
GetConsoleKeyboardLayoutNameW
GetTickCount
LZOpenFileA
CreateWaitableTimerW
TerminateThread
GetModuleHandleW
LZCreateFileW
WriteProfileStringA
LockFile
_llseek
CloseHandle
BaseFlushAppcompatCache
VirtualAlloc
GetStartupInfoA
FindFirstFileExW
SetConsoleOS2OemFormat
CreateActCtxW
GetFirmwareEnvironmentVariableA
IsDebuggerPresent
FindActCtxSectionGuid
DosPathToSessionPathA
GetStartupInfoW
GetTimeFormatW
CreateProcessInternalW
GetWriteWatch
LoadLibraryA
Heap32ListNext
GetModuleHandleA
crtdll
_mbctohira
_assert
fprintf
_getche
_ismbcl2
malloc
isprint
_strcmpi
strncat
_mbsspnp
wcstod
memset
_mbsbtype
_mbctombb
_ftol
strtoul
_flsbuf
__isascii
_putw
_CIcosh
_heapwalk
wcsrchr
_chmod
_makepath
time
_mbscat
_execv
_ismbslead
_findfirst
fgetc
_winver_dll
_mbctype
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ