Static task
static1
Behavioral task
behavioral1
Sample
0beed467a6c93643739356b10c3f284fa2221497f11bd5e1cd25843c34d966ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0beed467a6c93643739356b10c3f284fa2221497f11bd5e1cd25843c34d966ae.exe
Resource
win10v2004-20220812-en
General
-
Target
0beed467a6c93643739356b10c3f284fa2221497f11bd5e1cd25843c34d966ae
-
Size
298KB
-
MD5
66264f8412afef0b354fb01de69420b0
-
SHA1
b56a7787862b50fb320002d6540be5263e290d1d
-
SHA256
0beed467a6c93643739356b10c3f284fa2221497f11bd5e1cd25843c34d966ae
-
SHA512
b541e533cc843cb6109ea1aae337180404decc8cb0d9873a6de080979e57be721e249a0d621156744bf5fdfdb09f7affa179958aaa6a6e05111fff63d3a70c74
-
SSDEEP
6144:+JyVVKHJn7ZSqNqeXuqvPWzfd9pLoKQwfFNXaHoivB3iU0LMZ:HKB84W3pDQwtNP06MZ
Malware Config
Signatures
Files
-
0beed467a6c93643739356b10c3f284fa2221497f11bd5e1cd25843c34d966ae.exe windows x86
6100904f60db038127ed956703d9b333
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
CancelIo
LoadLibraryW
lstrlenW
WriteConsoleW
AddAtomW
GetProcessHeap
GetDriveTypeW
HeapDestroy
GetPrivateProfileSectionW
DeleteFileA
WriteConsoleW
SetEvent
VirtualProtect
CopyFileA
WriteConsoleW
HeapSize
lstrcpyA
GetStartupInfoA
GetFileAttributesA
GetCommandLineA
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
dsprop
MsgBox
ErrMsg
MsgBox
MsgBox
ReportError
FindSheet
ErrMsg
ErrMsg
FindSheet
CheckADsError
ReportError
FindSheet
CheckADsError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE