Static task
static1
Behavioral task
behavioral1
Sample
16d716f74832e16e423e92786be63c1269ad9ef57ea0d57ec45c9208c5f91548.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
16d716f74832e16e423e92786be63c1269ad9ef57ea0d57ec45c9208c5f91548.exe
Resource
win10v2004-20220812-en
General
-
Target
16d716f74832e16e423e92786be63c1269ad9ef57ea0d57ec45c9208c5f91548
-
Size
397KB
-
MD5
0177a2825f16425408c5af75256a3885
-
SHA1
e7958bd283f7e4f94be7fe6ca5ee76aea1a36813
-
SHA256
16d716f74832e16e423e92786be63c1269ad9ef57ea0d57ec45c9208c5f91548
-
SHA512
d825c4e880e283c435987040cdd15c0edbfc535c72cfc368bcbb2d9da4c66278a4728e8fc834d3efd7fed910197fd5aef0823e976377a62aea742d9eae04e276
-
SSDEEP
12288:xymUZr8XdlgOI5Mq7E20wXQV30U4zxFL5TC:xyATgj7E2lgV3WjBC
Malware Config
Signatures
Files
-
16d716f74832e16e423e92786be63c1269ad9ef57ea0d57ec45c9208c5f91548.exe windows x86
2bce5d8cf499c34238a0c9fac604fb13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
odbccp32
SQLGetTranslator
SQLGetInstalledDriversW
SQLConfigDataSource
SQLInstallODBCW
SQLInstallDriver
SQLSetConfigMode
SQLRemoveTranslator
SQLRemoveDriverW
SQLConfigDriver
SQLWritePrivateProfileString
SQLInstallerError
SQLRemoveTranslatorW
SQLInstallTranslatorEx
kernel32
SignalObjectAndWait
SetComputerNameA
GetSystemTimeAsFileTime
SetEndOfFile
LoadLibraryA
DeleteFileA
GetEnvironmentStringsW
OpenThread
GetTempPathA
ExpungeConsoleCommandHistoryW
wdigest
CredentialUpdateFree
CredentialUpdateRegister
CredentialUpdateNotify
SpLsaModeInitialize
SpInitialize
SpInstanceInit
SpUserModeInitialize
ole32
StgConvertVariantToProperty
HMENU_UserMarshal
CoRegisterSurrogateEx
OleRegEnumVerbs
SetConvertStg
cmutil
?GetFile@CIniW@@QBEPBGXZ
CmStrTrimW
?CIniA_WriteEntryToReg@CIniA@@IBEHPAUHKEY__@@PBD1PBEKK@Z
??1CIniW@@QAE@XZ
?CIniW_GetEntryFromReg@CIniW@@IBEPAEPAUHKEY__@@PBG1KK@Z
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ