Static task
static1
Behavioral task
behavioral1
Sample
346f2498f45cac8fc7498cd5232334efce443aae1e065bca9e0b4da356375f56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
346f2498f45cac8fc7498cd5232334efce443aae1e065bca9e0b4da356375f56.exe
Resource
win10v2004-20220812-en
General
-
Target
346f2498f45cac8fc7498cd5232334efce443aae1e065bca9e0b4da356375f56
-
Size
296KB
-
MD5
6ab0677fe171cc2bec3502e6c36b6fc0
-
SHA1
94e3564df03c5586649d8c429d12433add72125c
-
SHA256
346f2498f45cac8fc7498cd5232334efce443aae1e065bca9e0b4da356375f56
-
SHA512
a3ef08873cd3e8b521769f68051c659e0469707902f710d0687fe9f6efd2fa99f6a9103477393dc2aa21997c177d6f8b3aeae1ae7624d9226c9440aca5cea09e
-
SSDEEP
6144:5rDnyV7ldaAlCNrqRnDLZmYy+RL8MW0eTKt0roC7j0FIcYkHrQ:5IldaEerqRnDdTyC8TKOoUYC3IM
Malware Config
Signatures
Files
-
346f2498f45cac8fc7498cd5232334efce443aae1e065bca9e0b4da356375f56.exe windows x86
a81f0a23598fd13d857f6d6c7a1336e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
CopyFileA
HeapDestroy
lstrlenW
CloseHandle
GetDriveTypeW
SetEvent
GetStartupInfoA
ReadConsoleA
ReadConsoleA
GetFileAttributesA
LoadLibraryW
Sleep
GetCommandLineA
HeapSize
DeleteAtom
GetPrivateProfileSectionW
GetLogicalDrives
VirtualProtect
GetStringTypeW
AddAtomA
dsprop
CheckADsError
MsgBox
ErrMsg
FindSheet
ReportError
ErrMsg
FindSheet
MsgBox
FindSheet
ErrMsg
ReportError
CheckADsError
MsgBox
mmcndmgr
CreateExecutivePlatform
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 803B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE