Static task
static1
Behavioral task
behavioral1
Sample
d31c8a465ed5e1dfad035786a1f753ced854fd9b6609ba9346c8fe40c10d5f09.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d31c8a465ed5e1dfad035786a1f753ced854fd9b6609ba9346c8fe40c10d5f09.exe
Resource
win10v2004-20220901-en
General
-
Target
d31c8a465ed5e1dfad035786a1f753ced854fd9b6609ba9346c8fe40c10d5f09
-
Size
298KB
-
MD5
6f3f9a1209933734bbfa2b74b653d0fb
-
SHA1
160b50e8fd62e885ef40501fe9782dc513852820
-
SHA256
d31c8a465ed5e1dfad035786a1f753ced854fd9b6609ba9346c8fe40c10d5f09
-
SHA512
c2f278c494e9957bb19034f71211160eec2793f6fb0a6d75db6c89f1b944d641765039d631f2cb74d0c77ac95a7c1014c0d192d64524b685c5f170ccb0fee4e1
-
SSDEEP
6144:zTUyV/nrbImoWnawlazTIFvUfJrpg7CyAs/vqSj2y:xnImRnajzTIKY7CZs3DKy
Malware Config
Signatures
Files
-
d31c8a465ed5e1dfad035786a1f753ced854fd9b6609ba9346c8fe40c10d5f09.exe windows x86
67268f0cb1f31db677226019db6957cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
CopyFileA
HeapSize
VirtualProtect
WriteConsoleW
lstrlenW
AddAtomW
HeapDestroy
WriteConsoleW
Sleep
GetStartupInfoA
SetEvent
GetProcessHeap
lstrcpyA
GetDriveTypeW
WriteConsoleW
GetFileAttributesA
DeleteFileA
GetPrivateProfileSectionW
GetCommandLineA
LoadLibraryW
mmcndmgr
DllCanUnloadNow
DllRegisterServer
CreateExecutivePlatform
DllGetClassObject
dsprop
ReportError
FindSheet
ErrMsg
FindSheet
MsgBox
MsgBox
FindSheet
ErrMsg
CheckADsError
ErrMsg
MsgBox
ReportError
CheckADsError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE