Static task
static1
Behavioral task
behavioral1
Sample
cd0f3c1bae84b79f623bc650cba1bbf471c98560f188d72a73c7a2edcf21f8ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cd0f3c1bae84b79f623bc650cba1bbf471c98560f188d72a73c7a2edcf21f8ca.exe
Resource
win10v2004-20220812-en
General
-
Target
cd0f3c1bae84b79f623bc650cba1bbf471c98560f188d72a73c7a2edcf21f8ca
-
Size
52KB
-
MD5
b8ef316889f3e4af3ff6b5bad12161b5
-
SHA1
7601e62ea4759ab200b70575881a9736bb534f0d
-
SHA256
cd0f3c1bae84b79f623bc650cba1bbf471c98560f188d72a73c7a2edcf21f8ca
-
SHA512
83c65e4180885f856b555b13b6ebedde679204834283b3226b519ceab99938e8ea9a8befa238294bf8a0fb5756b22795cc4f3a606fd222e1e3e0dc4e42b7be38
-
SSDEEP
1536:qL0bO5xvzBJFd7XcUoy9Gom6r/4J/uVAC0bR:qhzBJ7z6y9/mBtuVAxb
Malware Config
Signatures
Files
-
cd0f3c1bae84b79f623bc650cba1bbf471c98560f188d72a73c7a2edcf21f8ca.exe windows x86
eadd844217e54336626d234b4c31f384
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleContext
OpenEventW
InterlockedExchangeAdd
QueryInformationJobObject
SetLastError
GetCPInfoExW
CreateRemoteThread
lstrcpynA
CreateTapePartition
TerminateThread
GetPriorityClass
LoadLibraryA
HeapDestroy
CreateWaitableTimerA
OpenSemaphoreW
LocalShrink
WTSGetActiveConsoleSessionId
FindClose
Heap32Next
UnregisterWait
GetACP
GetModuleHandleW
CallNamedPipeA
ReplaceFileW
DosDateTimeToFileTime
VirtualAlloc
_llseek
OutputDebugStringW
FindActCtxSectionGuid
SetFileShortNameW
GetStartupInfoA
GetConsoleOutputCP
CreateSemaphoreW
GlobalAlloc
GetEnvironmentVariableA
RegisterConsoleIME
odbc32
SQLGetDiagFieldW
SQLDataSourcesA
SQLGetDescRecW
SQLNativeSql
SQLSetConnectOptionW
SQLSetConnectAttrW
SQLGetInfoA
SQLMoreResults
SQLRowCount
SQLConnectW
GetODBCSharedData
SQLConnect
SQLSetScrollOptions
SQLAllocHandleStd
SQLNumResultCols
SQLColAttributeA
SQLGetDescFieldA
SQLSetCursorNameW
SQLGetConnectAttr
SQLGetTypeInfoA
SQLDataSources
PostODBCComponentError
SQLFreeEnv
SQLExecDirectW
SQLPrepareA
SQLNativeSqlA
SQLDriversW
SQLColAttributesA
VFreeErrors
SQLConnectA
SQLDriverConnect
sqlsrv32
SQLGetDiagFieldW
SQLColAttributeW
SQLProceduresW
WizLanguageDlgProc
SQLFetch
SQLSetStmtAttrW
SQLGetStmtAttrW
SQLProcedureColumnsW
SQLBindParameter
SQLConnectW
ConfigDSNW
SQLGetEnvAttr
SQLSetEnvAttr
SQLPrimaryKeysW
SQLBrowseConnectW
BCP_colptr
BCP_getcolfmt
SQLSetCursorNameW
SQLForeignKeysW
SQLNumParams
BCP_exec
SQLSetPos
SQLGetData
SQLExecDirectW
SQLBindCol
SQLNumResultCols
LibMain
BCP_moretext
SQLCopyDesc
BCP_colfmt
TestDlgProc
BCP_batch
SQLRowCount
SQLColumnPrivilegesW
BCP_init
winmm
midiOutGetErrorTextW
midiStreamPosition
midiInGetDevCapsW
midiStreamOpen
midiStreamOut
waveInUnprepareHeader
waveOutGetDevCapsA
waveOutMessage
WOWAppExit
mciGetYieldProc
mixerGetControlDetailsW
mciSendStringW
waveOutWrite
auxOutMessage
mci32Message
midiInStop
sndPlaySoundW
waveOutUnprepareHeader
waveInGetPosition
midiOutSetVolume
joyGetPos
mmioAdvance
mmioFlush
timeGetTime
PlaySoundA
aux32Message
atl
AtlRegisterClassCategoriesHelper
AtlCreateTargetDC
AtlInternalQueryInterface
AtlModuleUnregisterServer
AtlDevModeW2A
AtlModuleRegisterWndClassInfoA
AtlIPersistStreamInit_Save
AtlAxDialogBoxA
AtlUnmarshalPtr
AtlModuleExtractCreateWndData
AtlModuleTerm
AtlPixelToHiMetric
AtlIPersistStreamInit_Load
AtlAxGetHost
AtlAdvise
AtlModuleAddCreateWndData
AtlSetErrorInfo
AtlIPersistPropertyBag_Load
AtlModuleUpdateRegistryFromResourceD
AtlComPtrAssign
AtlAxCreateControlEx
AtlAxDialogBoxW
AtlModuleRegisterClassObjects
AtlModuleLoadTypeLib
AtlGetObjectSourceInterface
AtlIPersistPropertyBag_Save
AtlFreeMarshalStream
AtlModuleAddTermFunc
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ