Static task
static1
Behavioral task
behavioral1
Sample
f7bf582abc82dbbfb23396a0d3fd6961cd7b71dcadea840ec58540174fc6e2b8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7bf582abc82dbbfb23396a0d3fd6961cd7b71dcadea840ec58540174fc6e2b8.exe
Resource
win10v2004-20220812-en
General
-
Target
f7bf582abc82dbbfb23396a0d3fd6961cd7b71dcadea840ec58540174fc6e2b8
-
Size
239KB
-
MD5
144e1bc8fd21c9bcfd068d67a8552398
-
SHA1
3608f598dde8bc1d7923e482b2ee76995467cb50
-
SHA256
f7bf582abc82dbbfb23396a0d3fd6961cd7b71dcadea840ec58540174fc6e2b8
-
SHA512
51a7ce1dc25ad1634c48ee16be9840742d816babc80623a2c1b59ec58b3de99908b4a52afc44a5219cfa3d7fc7947f3a0c2a0edcb601ec7c1f3b5f16af84532c
-
SSDEEP
6144:5dip8f27zrufU2wDuHMzW47NjRK9IRUi8d:5de8fiwU20r8d
Malware Config
Signatures
Files
-
f7bf582abc82dbbfb23396a0d3fd6961cd7b71dcadea840ec58540174fc6e2b8.exe windows x86
e026cd8710bf6b644ba7bf70836996f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SetLastError
WriteConsoleW
GetCurrentProcessId
GlobalFindAtomA
FindFirstVolumeW
GetTickCount
GenerateConsoleCtrlEvent
odbccr32
SQLMoreResults
SQLRowCount
ReleaseCLStmtResources
SQLPrepare
msdtcprx
DTC_XaRecover
?InstallDtcClient@@YGJPAGKK@Z
ContactToNameObject
DllGetTransactionManagerCore
DTC_XaClose
DTC_XaForget
DTC_XaOpen
?GetDtcLogPath@@YGHKPAG@Z
DTC_XaComplete
DTC_XaStart
DTC_XaRollback
dnsapi
Dns_CreateMulticastSocket
DnsGetCacheDataTable
DnsQueryExW
NetInfo_ResetServerPriorities
DnsNotifyResolver
Dns_ResetNetworkInfo
DnsReplaceRecordSetUTF8
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ