Static task
static1
Behavioral task
behavioral1
Sample
90d206002e5db990c31c11f3f619ced5b547b5e6c4a755dc86069daa5a7a78fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
90d206002e5db990c31c11f3f619ced5b547b5e6c4a755dc86069daa5a7a78fc.exe
Resource
win10v2004-20220812-en
General
-
Target
90d206002e5db990c31c11f3f619ced5b547b5e6c4a755dc86069daa5a7a78fc
-
Size
298KB
-
MD5
42c3156310c48b4720fc72d6dfe80d20
-
SHA1
867b884f2aa868f8e961d50587a95116187b6c11
-
SHA256
90d206002e5db990c31c11f3f619ced5b547b5e6c4a755dc86069daa5a7a78fc
-
SHA512
77183aa740c75bd6d8871ab109d28a7c28ecc5e5287bd2cf786e916d790ccb4289473f9be215048815afc772425d7473bbdaa13d4210b73a2c72bd66d90e7d52
-
SSDEEP
6144:U8yVy7GHHLkGKXgkdmaS/J0OZ+lObQk8MV36kNMN5tMoEzyS1BOm:UJnLzug/auxG0i5GH
Malware Config
Signatures
Files
-
90d206002e5db990c31c11f3f619ced5b547b5e6c4a755dc86069daa5a7a78fc.exe windows x86
e6eb6e62e62f286767b35cb539576f16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
GetStartupInfoA
VirtualProtect
GetProcessHeap
Sleep
lstrlenW
GetPrivateProfileSectionW
WriteConsoleW
GetFileAttributesA
CancelIo
GetDriveTypeW
DeleteFileA
SetEvent
LoadLibraryW
WriteConsoleW
AddAtomW
HeapSize
WriteConsoleW
CopyFileA
GetCommandLineA
HeapDestroy
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
dsprop
ErrMsg
FindSheet
ErrMsg
CheckADsError
ReportError
ErrMsg
MsgBox
FindSheet
ReportError
CheckADsError
MsgBox
FindSheet
MsgBox
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE