Static task
static1
Behavioral task
behavioral1
Sample
53828530a30ea58705d223155693be9c29794769765c9f15e850450d9c014ca3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53828530a30ea58705d223155693be9c29794769765c9f15e850450d9c014ca3.exe
Resource
win10v2004-20220812-en
General
-
Target
53828530a30ea58705d223155693be9c29794769765c9f15e850450d9c014ca3
-
Size
108KB
-
MD5
7571929d454423dc28332d187fddc8d0
-
SHA1
83fee12a21e1e1198f4d14024b89c019a863b7e5
-
SHA256
53828530a30ea58705d223155693be9c29794769765c9f15e850450d9c014ca3
-
SHA512
adad91ab2ce7e6bd24cb774b69c558999ccd362735c3fc05ef4054fcc23ba2d1cf4bd4cc19f78bfb0d1e4711cd54b47c2ff2d25c957429589b231de127914280
-
SSDEEP
3072:bmSifFZe/C7+VYafnkgidq6p+4Nf2HViCDOu4TiP8w:qSo2fkBU4d2HVLDOu4T7w
Malware Config
Signatures
Files
-
53828530a30ea58705d223155693be9c29794769765c9f15e850450d9c014ca3.exe windows x86
f407779bdc99035c57599d77c82b64e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
lstrlenA
ReadConsoleA
CloseHandle
PulseEvent
GetPrivateProfileSectionA
HeapSize
LoadLibraryW
ReadConsoleA
SearchPathW
Sleep
GetStartupInfoA
DeleteFileW
GetDriveTypeA
FindAtomW
GetLastError
GetStringTypeW
TlsGetValue
ReadConsoleA
GetLogicalDrives
VirtualProtectEx
dsprop
FindSheet
ErrMsg
MsgBox
ErrMsg
ReportError
CheckADsError
MsgBox
FindSheet
ReportError
CheckADsError
MsgBox
ErrMsg
FindSheet
gpedit
ExportRSoPData
DllCanUnloadNow
BrowseForGPO
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 704B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE