Static task
static1
Behavioral task
behavioral1
Sample
a34e4b9928aa23871d2b4cfc667eeb737b8e7c5a7cfa83b11ae5b747f1938cd5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a34e4b9928aa23871d2b4cfc667eeb737b8e7c5a7cfa83b11ae5b747f1938cd5.exe
Resource
win10v2004-20220812-en
General
-
Target
a34e4b9928aa23871d2b4cfc667eeb737b8e7c5a7cfa83b11ae5b747f1938cd5
-
Size
809KB
-
MD5
44b5b527bfbb970a68a40b4981d88170
-
SHA1
920e01a369b3d5cdf1b4772449b216cf385e8cd4
-
SHA256
a34e4b9928aa23871d2b4cfc667eeb737b8e7c5a7cfa83b11ae5b747f1938cd5
-
SHA512
d09fb3645a781ba8899ed74abfd2111cf12f1e4ec7c81392436186eae3865749de838f19fce5b4ff21ea82299c7454b167d6a11c740322ef6c9c5ace61b9570f
-
SSDEEP
24576:YchGX98j761CWtCDWrkbow45YgEG6OtGu0g6t:Qg5Wiow4WgXIQQ
Malware Config
Signatures
Files
-
a34e4b9928aa23871d2b4cfc667eeb737b8e7c5a7cfa83b11ae5b747f1938cd5.exe windows x86
fac8b8ed42d18e90ebde20b8a71a0fab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleA
FindVolumeClose
GetPrivateProfileSectionW
AddAtomA
WriteConsoleA
WriteConsoleA
VirtualProtect
GetDriveTypeW
lstrcpyA
GetLogicalDrives
HeapDestroy
HeapSize
SetEvent
LoadLibraryW
DeleteAtom
Sleep
lstrlenW
GetFileAttributesA
CopyFileA
GetStartupInfoA
GetCommandLineA
mmcndmgr
DllCanUnloadNow
CreateExecutivePlatform
DllRegisterServer
DllGetClassObject
dsprop
MsgBox
FindSheet
CheckADsError
MsgBox
FindSheet
MsgBox
ErrMsg
FindSheet
ErrMsg
CheckADsError
ReportError
ErrMsg
ReportError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE