Static task
static1
Behavioral task
behavioral1
Sample
aa7ae7be00a70770535d6ae88d4f1bdbb7921614a73f1643c2d95aa72309227d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa7ae7be00a70770535d6ae88d4f1bdbb7921614a73f1643c2d95aa72309227d.exe
Resource
win10v2004-20220812-en
General
-
Target
aa7ae7be00a70770535d6ae88d4f1bdbb7921614a73f1643c2d95aa72309227d
-
Size
296KB
-
MD5
45f0fcfff0480c6d9e105e3a3b557e20
-
SHA1
2e1623dbe00322b83990591e6216a154ccadff04
-
SHA256
aa7ae7be00a70770535d6ae88d4f1bdbb7921614a73f1643c2d95aa72309227d
-
SHA512
cd2a7f56702d2f9c1ab606fd75a28dc3b70191253f56b6793c47779819ff65daf0f1db8b901f028327e5e09290c93c29883e0d4382821430176c8723d24d9902
-
SSDEEP
6144:mUOUADv8fgG09pixubmnaCJ1Fx4wwoWIiACJzbXY1HzBbUvDIUrP:XOUyv4gGUImmaCzFx4wwoWvJz0NBbUcq
Malware Config
Signatures
Files
-
aa7ae7be00a70770535d6ae88d4f1bdbb7921614a73f1643c2d95aa72309227d.exe windows x86
0728a42fd686695bd4751b79c8c5ed33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLogicalDrives
SearchPathW
lstrlenA
ReleaseMutex
GetStartupInfoA
GetPrivateProfileSectionA
ReadConsoleA
TlsGetValue
CloseHandle
ReadConsoleA
DeleteFileW
GetLastError
HeapSize
Sleep
LoadLibraryW
FindAtomW
GetStringTypeW
GetDriveTypeA
VirtualProtectEx
PulseEvent
ReadConsoleA
dsprop
ReportError
ErrMsg
MsgBox
CheckADsError
CheckADsError
MsgBox
ReportError
FindSheet
FindSheet
MsgBox
ErrMsg
ErrMsg
FindSheet
gpedit
ExportRSoPData
DllCanUnloadNow
DllGetClassObject
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE