Static task
static1
Behavioral task
behavioral1
Sample
e78a207b85e047ace552c2f0e8d6383869e3e1bf1736fb13ccc08c07760ef7b9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e78a207b85e047ace552c2f0e8d6383869e3e1bf1736fb13ccc08c07760ef7b9.exe
Resource
win10v2004-20220812-en
General
-
Target
e78a207b85e047ace552c2f0e8d6383869e3e1bf1736fb13ccc08c07760ef7b9
-
Size
56KB
-
MD5
43acc0a6c14b1168e028c70b6fd29b28
-
SHA1
8018af5ee968cc1e4dd3a2983e5302de718787f6
-
SHA256
e78a207b85e047ace552c2f0e8d6383869e3e1bf1736fb13ccc08c07760ef7b9
-
SHA512
0e63d4a40e84e6b6de30e75880c2b9c7e1e4cd522d4dfe7a9d4975ddaedeed7db682d36e23c5cf9aecc63db7738d053e2ebbc534046d189b742f2239eda61850
-
SSDEEP
768:+DpEX2l4sCyPlOjTfeIg+svSpMD0krMAqJD/rd2KpyXEhQTXEx7Qoj3/DB:+VgXTy9O/fe4eD0krDqJ/1pyU1ym
Malware Config
Signatures
Files
-
e78a207b85e047ace552c2f0e8d6383869e3e1bf1736fb13ccc08c07760ef7b9.exe windows x86
8dc49f2f5a652d704c0073c3f6787942
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
GetExitCodeProcess
GetModuleHandleA
lstrcmpiA
SetLastError
GetStdHandle
CreateWaitableTimerW
GetDriveTypeA
lstrlenA
lstrcmpiA
EndUpdateResourceA
CreateNamedPipeA
HeapCreate
Sleep
GetLogicalDrives
GetTickCount
GetBinaryTypeA
TlsFree
IsValidCodePage
lstrcmpiA
lstrcmpiA
FileTimeToLocalFileTime
lstrcmpiA
odbccp32
SQLGetTranslator
SQLInstallDriver
SQLConfigDataSource
SQLGetInstalledDrivers
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ