Static task
static1
Behavioral task
behavioral1
Sample
7ec85aeef5bdb1a2f23d3edcabdcd1447e541d9f229dfca301d24268763a2901.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ec85aeef5bdb1a2f23d3edcabdcd1447e541d9f229dfca301d24268763a2901.exe
Resource
win10v2004-20220812-en
General
-
Target
7ec85aeef5bdb1a2f23d3edcabdcd1447e541d9f229dfca301d24268763a2901
-
Size
807KB
-
MD5
67a763c768a8bebb2c260d02dc9daa60
-
SHA1
01e02271508a28749f1cc63d9b487634d9e93f84
-
SHA256
7ec85aeef5bdb1a2f23d3edcabdcd1447e541d9f229dfca301d24268763a2901
-
SHA512
8a3e9eccf4014caee0f23e06217d1a59aacf2ff77e3fc8c6f82edde78fffdc6c7ab5573f73c5ac0f1d7dab0ce081cd30d9455a4d875938b2fdd062d3ac9fc461
-
SSDEEP
24576:/eTkBGvcqFKSUFBSAa56Sbt2WIkFMVZC1iv/It:/WEnIOB566SB2qWVZC
Malware Config
Signatures
Files
-
7ec85aeef5bdb1a2f23d3edcabdcd1447e541d9f229dfca301d24268763a2901.exe windows x86
ce77082c7b40b7dc130a0a7239dd4122
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
LoadLibraryW
ReadConsoleA
CloseHandle
GetPrivateProfileSectionW
ReadConsoleA
SetEvent
VirtualProtect
GetStringTypeW
GetStartupInfoA
GetLastError
CopyFileA
lstrlenW
ReadConsoleA
GetLogicalDrives
GetFileAttributesA
ReleaseMutex
FindAtomW
GetDriveTypeW
Sleep
HeapDestroy
dsprop
CheckADsError
FindSheet
CheckADsError
ErrMsg
ReportError
ReportError
FindSheet
FindSheet
ErrMsg
MsgBox
MsgBox
MsgBox
ErrMsg
gpedit
DllGetClassObject
BrowseForGPO
DllCanUnloadNow
ExportRSoPData
Sections
.text Size: 1024B - Virtual size: 789B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE