Static task
static1
Behavioral task
behavioral1
Sample
abeb6982255bf622316425fdb9ef3354ade752e6896fc8c569d386dccb8ab86e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abeb6982255bf622316425fdb9ef3354ade752e6896fc8c569d386dccb8ab86e.exe
Resource
win10v2004-20220901-en
General
-
Target
abeb6982255bf622316425fdb9ef3354ade752e6896fc8c569d386dccb8ab86e
-
Size
71KB
-
MD5
db62c2a8d7a111da135bb1d930418fad
-
SHA1
f8101a4a4aea7fe1dcaf22abd7846a12f9e94582
-
SHA256
abeb6982255bf622316425fdb9ef3354ade752e6896fc8c569d386dccb8ab86e
-
SHA512
bfc2e44595b4163fc858fa4e9cf4803a75944d442a8805de0baa852b1b3a2bf83fe81be802f0dd20add832b1510cc20cb666ba05360aae77163119a08e59f7d5
-
SSDEEP
768:gaME986KWo3NBgFvoagyI3rq5OlmUWJPmZenxbCroHmm:gJE9uWo3NYomErqMmU8nxKoHD
Malware Config
Signatures
Files
-
abeb6982255bf622316425fdb9ef3354ade752e6896fc8c569d386dccb8ab86e.exe windows x86
b1e1b521b532a8a5ae1b0ebddf53e65a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
sqlunirl
_PostMessage@16
_LoadCursor@8
_MessageBox@16
_LoadLibrary@4
_GetProcAddress_@8
_DefWindowProc@16
_FormatMessage@28
_SetWindowLong@12
_LoadIcon@8
_GetUnicodeRedirectionLayer@0
_MAKEINTRESOURCE@4
_CreateWindowEx@48
user32
PostQuitMessage
ShowWindow
TranslateMessage
kernel32
WideCharToMultiByte
FreeEnvironmentStringsA
LCMapStringA
FreeEnvironmentStringsW
LoadLibraryA
GetProcAddress
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
IsBadWritePtr
GetOEMCP
GetACP
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
GetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
WriteFile
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
HeapFree
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hhqg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE