Static task
static1
Behavioral task
behavioral1
Sample
b2f1dd055170859a936bdc2659afb85f1813f3a166e68fa3d016c2ea032fa891.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2f1dd055170859a936bdc2659afb85f1813f3a166e68fa3d016c2ea032fa891.exe
Resource
win10v2004-20220812-en
General
-
Target
b2f1dd055170859a936bdc2659afb85f1813f3a166e68fa3d016c2ea032fa891
-
Size
297KB
-
MD5
6d4c59c3f3e27b36a7d66a1463b5d980
-
SHA1
090fa7b0609a6626aa0305b54da56344d62b4cc7
-
SHA256
b2f1dd055170859a936bdc2659afb85f1813f3a166e68fa3d016c2ea032fa891
-
SHA512
1b7851a7f7e2f5de30e75ac06183543bbce574e0e3766e8a82a28678a8f8fb4fa92b73616a0034c2344e22b0b8bd61cde08d99dc4ddd33c4db3360febd764f99
-
SSDEEP
6144:Oz1KayVwf2Qyy9qICcK2TmYyZFk7G4Y9l1QVI1YqQpscENr2fYUPqr9IbSS0k+bU:OZycPzy6gRNKCig1zS0k+bU
Malware Config
Signatures
Files
-
b2f1dd055170859a936bdc2659afb85f1813f3a166e68fa3d016c2ea032fa891.exe windows x86
3617f3c4176e17a9240c9735b9849b13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
HeapSize
ReadConsoleA
FindVolumeClose
GetStartupInfoA
GetFileAttributesA
VirtualProtect
ReadConsoleA
DeleteAtom
lstrlenW
AddAtomA
CopyFileA
HeapDestroy
SetEvent
GetStringTypeW
ReadConsoleA
GetPrivateProfileSectionW
LoadLibraryW
GetDriveTypeW
GetLogicalDrives
Sleep
dsprop
FindSheet
MsgBox
ReportError
FindSheet
ErrMsg
CheckADsError
MsgBox
FindSheet
ErrMsg
ErrMsg
MsgBox
CheckADsError
ReportError
mmcndmgr
CreateExecutivePlatform
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 803B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE