Static task
static1
Behavioral task
behavioral1
Sample
71d3c35221b5985fe92f0bc1e32a62f223d1842325739b5cb97e0917989caab5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
71d3c35221b5985fe92f0bc1e32a62f223d1842325739b5cb97e0917989caab5.exe
Resource
win10v2004-20221111-en
General
-
Target
71d3c35221b5985fe92f0bc1e32a62f223d1842325739b5cb97e0917989caab5
-
Size
82KB
-
MD5
2848c4ab2bf280f046853e8407e516e0
-
SHA1
0995cd596b814790bf588b0a4c4c3ff7eacd3335
-
SHA256
71d3c35221b5985fe92f0bc1e32a62f223d1842325739b5cb97e0917989caab5
-
SHA512
eb1ca92c50457c34bd860ac106ef784644902e8090a71cfa437cedd65b6ef4cfa57abe0bd5076c8ce5962731458b482d4ff10ea55ef3fd5ae3f78eb351ebb643
-
SSDEEP
768:r9vwO12z+nUrqoEhjng6OJgMepy+JksdvD5+4dNrh+nHagq4bnOexMeoxo82US/P:3tGsRpVtv5Xrh+614z0UQe4I/NosjZ
Malware Config
Signatures
Files
-
71d3c35221b5985fe92f0bc1e32a62f223d1842325739b5cb97e0917989caab5.exe windows x86
f5cb33f6505d603a1cfb109486910665
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
HeapFree
GetFileAttributesA
CreateEventW
LocalLock
LoadLibraryA
HeapDestroy
GetCurrentThread
GetStringTypeA
FindVolumeClose
GetVersionExW
GetDriveTypeA
GetCurrentProcess
DeleteFileA
GetPrivateProfileIntW
GetStdHandle
VirtualProtectEx
OpenMutexA
GetPrivateProfileSectionA
CloseHandle
lstrlenA
shell32
DragAcceptFiles
DragQueryFileA
SHFree
ExtractIconA
ShellMessageBoxA
ShellAboutA
DllUnregisterServer
SHGetMalloc
DuplicateIcon
DragFinish
StrChrA
SHGetSettings
SHGetMalloc
odbccp32
SQLInstallDriver
SQLInstallODBC
SQLConfigDataSource
SQLGetAvailableDrivers
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ