Static task
static1
Behavioral task
behavioral1
Sample
27fb0c7d0a3a435baba1ac1a44b4011d1334cb478550699958d88b25ccc0ed07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27fb0c7d0a3a435baba1ac1a44b4011d1334cb478550699958d88b25ccc0ed07.exe
Resource
win10v2004-20220812-en
General
-
Target
27fb0c7d0a3a435baba1ac1a44b4011d1334cb478550699958d88b25ccc0ed07
-
Size
297KB
-
MD5
4c6d1e9b5789d397a519768c32c53a18
-
SHA1
e40ea6eace2b28f7c1afd08932f94a02cd7d48db
-
SHA256
27fb0c7d0a3a435baba1ac1a44b4011d1334cb478550699958d88b25ccc0ed07
-
SHA512
37eed32cf0222278d520b2bb0994455f19ee75884ce681f1406b7def328acd02beb2f01553ac7e8d1be7e8cede6873621acaa20f9f433f818c2bd7bd871ddae2
-
SSDEEP
6144:6sd+nyV428rV60yysiRiKlmaxNDRE4rcZFZnBtfCbatxIE:6sIS8Z6byLmabDRE4r+Z3XxZ
Malware Config
Signatures
Files
-
27fb0c7d0a3a435baba1ac1a44b4011d1334cb478550699958d88b25ccc0ed07.exe windows x86
babd438d54fc24a00f7b2dd08560350f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
VirtualProtect
ReadConsoleA
SetEvent
GetStartupInfoA
GetStringTypeW
HeapDestroy
HeapSize
CloseHandle
GetDriveTypeW
FindAtomW
GetLogicalDrives
ReadConsoleA
LoadLibraryW
ReadConsoleA
GetPrivateProfileSectionW
GetFileAttributesA
CopyFileA
lstrlenW
GetCommandLineA
Sleep
dsprop
MsgBox
CheckADsError
FindSheet
FindSheet
ErrMsg
FindSheet
ErrMsg
ReportError
ReportError
ErrMsg
MsgBox
MsgBox
CheckADsError
mmcndmgr
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
CreateExecutivePlatform
Sections
.text Size: 1024B - Virtual size: 803B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE