Static task
static1
Behavioral task
behavioral1
Sample
a273a05d63ec0561c44c2bc3e38717d9f985609c8bf347241372a8c147292d60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a273a05d63ec0561c44c2bc3e38717d9f985609c8bf347241372a8c147292d60.exe
Resource
win10v2004-20220812-en
General
-
Target
a273a05d63ec0561c44c2bc3e38717d9f985609c8bf347241372a8c147292d60
-
Size
65KB
-
MD5
6cb7c3e4314e46f703650658695e6910
-
SHA1
8e50789fc17520f322723275f1c6cdda1358e734
-
SHA256
a273a05d63ec0561c44c2bc3e38717d9f985609c8bf347241372a8c147292d60
-
SHA512
8066bbff6d4f3a253266cf632faa07d46cb926163432992b828c1fa43eeab50885eec99d00a7af6468f0a86ca5ddb7378c3ee766f1a9e4a588d2b682dce2c51e
-
SSDEEP
1536:JBdKXo4rjxkNzSYc9SklG7jxkMjYTzCej3g5wA9fI/Ml2LsZC:JbK4gxrYcHI8Tz5od97Wsk
Malware Config
Signatures
Files
-
a273a05d63ec0561c44c2bc3e38717d9f985609c8bf347241372a8c147292d60.exe windows x86
a69f79128cfaa0e7fa938e8c2cb10454
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
GetDriveTypeA
GetLogicalDrives
GetPrivateProfileSectionA
FindAtomW
TlsGetValue
LoadLibraryW
lstrlenA
PulseEvent
DeleteFileW
GetLastError
CopyFileA
ReleaseMutex
ReadConsoleA
VirtualProtectEx
GetStartupInfoA
ReadConsoleA
HeapSize
GetStringTypeW
CloseHandle
Sleep
dsprop
ErrMsg
ErrMsg
MsgBox
ReportError
MsgBox
FindSheet
FindSheet
ErrMsg
CheckADsError
ReportError
MsgBox
FindSheet
CheckADsError
gpedit
DllGetClassObject
ExportRSoPData
DllCanUnloadNow
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 773B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE