Static task
static1
Behavioral task
behavioral1
Sample
96a7dae1d6bfcba910b8ce26e55d9c87790513d7762d1ff05266eb58917629ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96a7dae1d6bfcba910b8ce26e55d9c87790513d7762d1ff05266eb58917629ca.exe
Resource
win10v2004-20220812-en
General
-
Target
96a7dae1d6bfcba910b8ce26e55d9c87790513d7762d1ff05266eb58917629ca
-
Size
170KB
-
MD5
034635ac8a12beb84dfdd8a4d82fa122
-
SHA1
c31d91112b880caddc1ffbc994038eabab180c20
-
SHA256
96a7dae1d6bfcba910b8ce26e55d9c87790513d7762d1ff05266eb58917629ca
-
SHA512
850742925d1c81680664731aac4065b541e6912ac13d9fa7859ca182d14bd69c5eae27030a76f762376fc14375009782da6002a2f0c1234b89f75f4e8e40b7b1
-
SSDEEP
3072:nQDi1DHCFlirxK1g+srOoGG3PyMrjmYqIJGWZK8KXnhwZaBUS2g6vpcf8ORi:nQm1SliJ+kGG/T1xZK8KRwgSFS0c
Malware Config
Signatures
Files
-
96a7dae1d6bfcba910b8ce26e55d9c87790513d7762d1ff05266eb58917629ca.exe windows x86
56808534ea6a5a4f6709e79742cf98f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sqlwoa
_DrawText@20
_LoadIcon@8
_SendDlgItemMessage@20
newMultiByteFromWideCharEx
newMultiByteFromWideChar
_LoadString@16
_LoadCursor@8
_GetTextExtentPoint@16
_GetFileTitle@12
_GetTextExtentPoint32@16
_PeekMessage@20
_GetClassInfo@12
_GetDlgItemText@16
_RemoveProp@8
_StartDoc@8
_FreeEnvironmentStrings@4
_MessageBox@16
_GetDiskFreeSpaceEx@16
_CommDlg_OpenSave_GetFolderPath@12
_SetWindowText@8
_CreateFile@28
_LoadBitmap@8
_SetProp@12
_IsDialogMessage@8
_CommDlg_OpenSave_GetFilePath@12
_MoveFile@8
newMultiByteFromWideCharSize
_trename
_LoadMenu@8
_FindResource@12
_CharUpper@4
_tfopen
ConvertMultiSZNameToW
_SetWindowLong@12
query
?SetProperty@CDbPropBaseRestriction@@QAEHABVCDbColumnNode@@@Z
?ParseCatalogURL@@YGJPBGAAV?$XPtrST@G@@1@Z
??0CPropNameArray@@QAE@I@Z
?GetR8@CAllocStorageVariant@@QBENI@Z
?QueryInterface@CEnumWorkid@@UAGJABU_GUID@@PAPAX@Z
?SetFILETIME@CStorageVariant@@QAEXU_FILETIME@@I@Z
?SetNumberOfSortProps@CCatState@@QAEXI@Z
?GetUShort@CMemDeSerStream@@UAEGXZ
?Cleanup@CDbColId@@QAEXXZ
?SetProperty@CFullPropSpec@@QAEXK@Z
?AcquireRead@CPropertyStore@@AAEXAAVCReadWriteLockRecord@@@Z
?DisableCI@CMachineAdmin@@QAEHXZ
?ClearList@CPropertyList@@QAEXXZ
?SetPhrase@CNatLanguageRestriction@@QAEXPBG@Z
?Enum@CWin32RegAccess@@QAEHPAGK@Z
??0CQueryScanner@@QAE@PBGHKH@Z
?IsCIDialect@CDbPropertyRestriction@@QAEHXZ
?Clone@CEnumString@@UAGJPAPAUIEnumString@@@Z
?EnableCI@CMachineAdmin@@QAEHXZ
?LongInit@CPropStoreManager@@QAEXAAHAAKP6GXKHPBX@Z2@Z
?IsImpersonated@CImpersonateSystem@@SGHXZ
?ReadPrimaryProperty@CPropStoreManager@@QAEHKKAAUtagPROPVARIANT@@@Z
?WritePropertyInNewRecord@CPropStoreManager@@QAEKKABVCStorageVariant@@@Z
?Marshall@CDbPropSet@@QBEXAAVPSerStream@@@Z
??0CFullPath@@QAE@PBG@Z
?StartCI@CMachineAdmin@@QAEHXZ
??0CWin32RegAccess@@QAE@PAUHKEY__@@PBG@Z
?Map@CMmStreamConsecBuf@@QAEXK@Z
??4CDbByGuid@@QAEAAV0@ABV0@@Z
?UnMarshall@CDbColId@@QAEHAAVPDeSerStream@@@Z
??8CDbColId@@QBEHABV0@@Z
?SetScopePropertiesNoThrow@@YGJPAUICommand@@IPBQBGPBK11@Z
CITextToSelectTree
??0CFileMapView@@QAE@PBG@Z
?GetAllEntries@CPropertyList@@UAEJPAPAVCPropEntry@@K@Z
?IsValid@CRestriction@@QBEHXZ
?PeekULong@CMemDeSerStream@@UAEKXZ
??1CDbPropIDSet@@QAE@XZ
?GetSZParam@CMachineAdmin@@QAEHPBGPAGK@Z
?GetCGIVariableW@CWebServer@@QAEHPBGAAV?$XArray@G@@AAK@Z
mtxoci
GetXaSwitch
opinit
orol
MTxOciInit
oexfet
ocom
obindps
oexec
osetpi
obndrv
oopen
odefin
oflng
oclose
oparse
ologof
oexn
odessp
odefinps
ofen
odescr
ofetch
oopt
MTxOciGetVersion
oermsg
ocan
ocof
obndrn
olog
ogetpi
MTxOciRegisterCursor
obreak
obndra
ologTransacted
oerhms
MTxolog
Enlist
ocon
kernel32
IsProcessorFeaturePresent
LocalUnlock
_lopen
GetDiskFreeSpaceExW
ReadFileScatter
DeviceIoControl
AddRefActCtx
SetProcessPriorityBoost
GetLargestConsoleWindowSize
GetOEMCP
SetTermsrvAppInstallMode
GetCommTimeouts
SetConsoleFont
HeapSetInformation
SetInformationJobObject
OpenProfileUserMapping
GetPrivateProfileSectionNamesW
QueueUserWorkItem
GetCommMask
GetStartupInfoW
SetConsoleOS2OemFormat
GetPrivateProfileStringA
VirtualAlloc
LockFile
SetUserGeoID
VirtualFreeEx
GetConsoleAliasesA
EnumCalendarInfoW
LoadLibraryA
IsValidCodePage
SetFileAttributesA
GlobalCompact
SetSystemPowerState
GetEnvironmentStringsW
SetFileValidData
FoldStringW
DebugBreakProcess
GetTimeZoneInformation
GetVolumePathNamesForVolumeNameA
CreateHardLinkA
RegisterConsoleVDM
GetStartupInfoA
TransmitCommChar
OpenMutexA
GetVolumeNameForVolumeMountPointA
EraseTape
GetTimeFormatA
GlobalGetAtomNameW
msvcrt40
_wsystem
?fd@fstream@@QBEHXZ
_ismbckata
?writepad@ostream@@AAEAAV1@PBD0@Z
_wgetenv
??4Iostream_init@@QAEAAV0@ABV0@@Z
__argv
_sopen
?in_avail@streambuf@@QBEHXZ
_jn
?open@fstream@@QAEXPBDHH@Z
_fstat
?write@ostream@@QAEAAV1@PBCH@Z
_adj_fdiv_m32
??1bad_typeid@@UAE@XZ
_splitpath
??0istream_withassign@@QAE@PAVstreambuf@@@Z
_except_handler2
?pptr@streambuf@@IBEPADXZ
??_8iostream@@7Bostream@@@
__p__environ
?attach@ofstream@@QAEXH@Z
_wctime
??_7bad_cast@@6B@
??_Eistream@@UAEPAXI@Z
?seekpos@streambuf@@UAEJJH@Z
_stati64
??0istream_withassign@@QAE@ABV0@@Z
?fill@ios@@QBEDXZ
??4ofstream@@QAEAAV0@ABV0@@Z
??0ifstream@@QAE@H@Z
wcsrchr
_ftol
?_set_new_mode@@YAHH@Z
strtol
_mbsninc
_adj_fdivr_m32
sqrt
__p__timezone
__p__acmdln
??0__non_rtti_object@@QAE@ABV0@@Z
?read@istream@@QAEAAV1@PACH@Z
_wcsicmp
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ