Static task
static1
Behavioral task
behavioral1
Sample
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260.exe
Resource
win10v2004-20220812-en
General
-
Target
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260
-
Size
119KB
-
MD5
672ae6259572394852160ce5bbb86450
-
SHA1
6af13682939606ce0b80eac241295d615483f380
-
SHA256
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260
-
SHA512
4e7c7a7b97cf5b4598837bc307d784790d76a959ca65581b723f61311f121843169bd4dabdd01bdd0296aa157af610f5f4fa69060bb25125d9b33a50dc5a97b6
-
SSDEEP
3072:3JeJL1o96UGbZuCx9q/AlMTYZnixbWPN:5C3FbZ3x9q/sMcZioN
Malware Config
Signatures
Files
-
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260.exe windows x86
4768ce4cd9688c95abe2d90b886c7f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
HeapSize
SearchPathW
GetDriveTypeA
CloseHandle
GetLastError
DeleteFileW
GetStringTypeW
LoadLibraryW
GetLogicalDrives
GetPrivateProfileSectionA
FindAtomW
ReadConsoleA
GetStartupInfoA
TlsGetValue
VirtualProtectEx
Sleep
lstrlenA
ReadConsoleA
PulseEvent
ReadConsoleA
dsprop
CheckADsError
MsgBox
ErrMsg
CheckADsError
ErrMsg
FindSheet
MsgBox
ReportError
FindSheet
ErrMsg
MsgBox
ReportError
FindSheet
gpedit
DllGetClassObject
ExportRSoPData
DllCanUnloadNow
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 704B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE