Static task
static1
Behavioral task
behavioral1
Sample
Access2MySQL Pro v5.1.5/Access2MySQLPro_5.1.5.msi
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Access2MySQL Pro v5.1.5/Access2MySQLPro_5.1.5.msi
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Access2MySQL Pro v5.1.5/Setup.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Access2MySQL Pro v5.1.5/Setup.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Access2MySQL Pro v5.1.5/非常世纪资源网.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Access2MySQL Pro v5.1.5/非常世纪资源网.url
Resource
win10v2004-20231215-en
General
-
Target
18bd01cee701fbcc9759d0e8d72cda8f
-
Size
6.4MB
-
MD5
18bd01cee701fbcc9759d0e8d72cda8f
-
SHA1
48c9b52620dcd90e4e7730e2ba5bd133ff479cb2
-
SHA256
3c91cb79cc4d024990365e210e9bddee35c338efe4f7c31a2425e60ed866075c
-
SHA512
4089e2363e8ba011aaec80eef526e2385ebba6c636398ece84f89fe0e2a344c448cd862be540d5200325c9085987bb442b03d51f82b2d2e37657365098f63f45
-
SSDEEP
196608:sd5J9iy21xglfG+frgy+9xf/f+01SJcTOYZ/7:wURMjTkB/f+0c+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Access2MySQL Pro v5.1.5/Setup.Exe
Files
-
18bd01cee701fbcc9759d0e8d72cda8f.rar
-
Access2MySQL Pro v5.1.5/Access2MySQLPro_5.1.5.msi.msi
-
Access2MySQL Pro v5.1.5/Setup.Exe.exe windows:4 windows x86 arch:x86
16565ac95a428f6ccd17d07d629c1a8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarUI4FromStr
SysAllocStringLen
GetErrorInfo
SetErrorInfo
SysAllocString
SysFreeString
ole32
OleRun
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
kernel32
lstrcmpA
CloseHandle
CreateFileA
Sleep
SetLastError
GetTickCount
GetPrivateProfileStringA
GetModuleFileNameA
GetExitCodeProcess
CreateProcessA
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
WideCharToMultiByte
lstrlenW
IsBadReadPtr
GetProcAddress
WriteFile
ReadFile
DeleteFileW
SetErrorMode
LoadLibraryExA
MultiByteToWideChar
LoadResource
SizeofResource
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
GetUserDefaultLCID
GetEnvironmentVariableA
GetVersion
CreateFileW
FindResourceW
GlobalAlloc
GetModuleFileNameW
GetTempFileNameW
GetTempPathW
LoadLibraryExW
GetLocaleInfoA
InterlockedExchange
LocalFree
GetTempFileNameA
GetTempPathA
GlobalFree
CreateMutexA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
RtlUnwind
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetACP
FlushFileBuffers
SetFilePointer
IsBadCodePtr
user32
LoadStringA
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
CharNextA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
QueryServiceStatus
ControlService
OpenServiceA
OpenSCManagerA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Access2MySQL Pro v5.1.5/Setup.Ini
-
Access2MySQL Pro v5.1.5/WhatsNew.txt
-
Access2MySQL Pro v5.1.5/下载说明.htm.html .js polyglot
-
Access2MySQL Pro v5.1.5/非常世纪资源网.url.url