Static task
static1
Behavioral task
behavioral1
Sample
9a501e2431b76a8fc78a95f5f3da58b132236a5748290f27f76c1c1da5962551.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a501e2431b76a8fc78a95f5f3da58b132236a5748290f27f76c1c1da5962551.exe
Resource
win10v2004-20220812-en
General
-
Target
9a501e2431b76a8fc78a95f5f3da58b132236a5748290f27f76c1c1da5962551
-
Size
297KB
-
MD5
3de480d732ca769db4c80eeaf91401a0
-
SHA1
b06c91e665ff62b2ed5bd190fff462c78470fbf1
-
SHA256
9a501e2431b76a8fc78a95f5f3da58b132236a5748290f27f76c1c1da5962551
-
SHA512
969038e24b7ef818ed56d4820f492008229876ca72b755c3212fc10eb6cfaf502d8202c9c914655f3952b3aa3258c06bd5c09b83e4784042b5c7bc0cf2b80188
-
SSDEEP
6144:V/DyVhF3Mv+xS2T3yPSNaIOiJrDemK8w9DEHAgZw7EhvzuXW:V/OF8WSr8agdemK5DlgZw78vz
Malware Config
Signatures
Files
-
9a501e2431b76a8fc78a95f5f3da58b132236a5748290f27f76c1c1da5962551.exe windows x86
f947ae3e83635e6f30fc5365029c73bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
PulseEvent
lstrlenA
DeleteFileW
GetStartupInfoA
GetLogicalDrives
FindAtomW
LoadLibraryW
GetDriveTypeA
GetLastError
ReadConsoleA
ReadConsoleA
CopyFileA
Sleep
TlsGetValue
VirtualProtectEx
ReadConsoleA
ReleaseMutex
GetStringTypeW
CloseHandle
HeapSize
dsprop
ErrMsg
ErrMsg
MsgBox
FindSheet
MsgBox
ReportError
ErrMsg
CheckADsError
FindSheet
MsgBox
ReportError
FindSheet
CheckADsError
gpedit
ExportRSoPData
DllCanUnloadNow
DllGetClassObject
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 773B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE