Static task
static1
Behavioral task
behavioral1
Sample
7a5bc53690b8127ac287957054a6c2a15e0cb857e04fa5a0c46b8f91da6dc5b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a5bc53690b8127ac287957054a6c2a15e0cb857e04fa5a0c46b8f91da6dc5b0.exe
Resource
win10v2004-20220812-en
General
-
Target
7a5bc53690b8127ac287957054a6c2a15e0cb857e04fa5a0c46b8f91da6dc5b0
-
Size
63KB
-
MD5
6e75c5a27ac2474f065e52966a919b22
-
SHA1
af6ed645eee5410fcab1ff7d974ca091cc5c60d4
-
SHA256
7a5bc53690b8127ac287957054a6c2a15e0cb857e04fa5a0c46b8f91da6dc5b0
-
SHA512
6af2ea7f22b635b0ed83cefeebed0667ca38b585f492c3e84120a44503b82bdbb91e6545427428aa2150f0c9c6dc90674c1f825b66a9799f4878f8802d591987
-
SSDEEP
1536:EJ/9uD3lbnZjzBKGHP2wyKxubj6c6EY6ac+y9GNDDDdW48:0albnRz8lP67cgI48
Malware Config
Signatures
Files
-
7a5bc53690b8127ac287957054a6c2a15e0cb857e04fa5a0c46b8f91da6dc5b0.exe windows x86
35b6074c5bc79cc673d5ec4e6a141e5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
AddAtomA
GetFileAttributesA
HeapSize
GetDriveTypeW
GetLogicalDrives
HeapDestroy
VirtualProtect
SetEvent
GetStringTypeW
ReadConsoleA
lstrlenW
Sleep
GetPrivateProfileSectionW
CopyFileA
GetStartupInfoA
FindAtomW
GetLastError
ReadConsoleA
LoadLibraryW
ReadConsoleA
dsprop
MsgBox
ReportError
ReportError
FindSheet
FindSheet
MsgBox
CheckADsError
FindSheet
MsgBox
ErrMsg
CheckADsError
ErrMsg
ErrMsg
mmcndmgr
DllCanUnloadNow
CreateExecutivePlatform
DllRegisterServer
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE