Static task
static1
Behavioral task
behavioral1
Sample
a37406dfd0a95789d8c37b755ea9455d50ca00373b04d9b7f4db3ead82b2dfc0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a37406dfd0a95789d8c37b755ea9455d50ca00373b04d9b7f4db3ead82b2dfc0.exe
Resource
win10v2004-20230220-en
General
-
Target
a37406dfd0a95789d8c37b755ea9455d50ca00373b04d9b7f4db3ead82b2dfc0
-
Size
18KB
-
MD5
0f31ab184f294cd479a446d01d90e4ed
-
SHA1
793ca2a85a06f5e0e449b2b3351b546a442e5b61
-
SHA256
a37406dfd0a95789d8c37b755ea9455d50ca00373b04d9b7f4db3ead82b2dfc0
-
SHA512
c3508e87dc1e399aeb296a8175f737f1c100099cc13fff1337021feb687a6d7809f6385f8a420e9470dd47126b03afa2ec4ca515dfe9ea40a762c1098794aaac
-
SSDEEP
384:hZjTeDmppf+WlAN52IOtTWbjqKqGhWw8DWWT:vveDmHf/lANY0qGf8D
Malware Config
Signatures
Files
-
a37406dfd0a95789d8c37b755ea9455d50ca00373b04d9b7f4db3ead82b2dfc0.exe windows x86
ceb707e94166df8144f86a55a22a23c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
odbc32
ord3
ord14
ord9
ord2
ord1
ord150
ord139
ord141
ord15
ord111
ord61
ord16
ord135
ord136
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetModuleHandleA
GlobalAlloc
MultiByteToWideChar
GlobalFree
GetPrivateProfileSectionW
GetLastError
GetStdHandle
SetFilePointer
FlushFileBuffers
WideCharToMultiByte
GetConsoleOutputCP
WriteFile
user32
LoadStringW
LoadStringA
msvcr71
__p__fmode
__set_app_type
_except_handler3
__security_error_handler
__dllonexit
_onexit
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
wcschr
vswprintf
wcsstr
_wtoi
wcsncpy
swprintf
wcscat
wcscpy
wcsrchr
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___winitenv
_amsg_exit
__wgetmainargs
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ