Static task
static1
Behavioral task
behavioral1
Sample
81e7176693902f6895e5a03989e954667b666aa18876778edbb08efbd4490504.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
81e7176693902f6895e5a03989e954667b666aa18876778edbb08efbd4490504.exe
Resource
win10v2004-20220812-en
General
-
Target
81e7176693902f6895e5a03989e954667b666aa18876778edbb08efbd4490504
-
Size
296KB
-
MD5
68b9fd26f17ba46bcd5ee7f5d8673360
-
SHA1
7d51707a4aa223ec9f3ac2045e066b8b567be009
-
SHA256
81e7176693902f6895e5a03989e954667b666aa18876778edbb08efbd4490504
-
SHA512
d0294006bbde18d53c1a1073f66bb2efc574f876058818a9ba8ca4cc571d20841ea8d7c993adea39ab723fb5440a1a9ff6856061a381e8899ef298dc76a0ee32
-
SSDEEP
6144:yxIyVGHt/TQYFFsIUd/b5/w2W4+C0JBJcl51pizBMojUM0j:TtRu1C4X6W7+/4Mw
Malware Config
Signatures
Files
-
81e7176693902f6895e5a03989e954667b666aa18876778edbb08efbd4490504.exe windows x86
e2d56f4b4fced25b2fcf6cd1d17bc2ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
lstrlenW
Sleep
WriteConsoleW
lstrcpyA
WriteConsoleW
CancelIo
WriteConsoleW
DeleteFileA
HeapDestroy
HeapSize
GetProcessHeap
LoadLibraryW
VirtualProtect
AddAtomW
GetPrivateProfileSectionW
CopyFileA
GetDriveTypeW
GetCommandLineA
GetFileAttributesA
GetStartupInfoA
mmcndmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
dsprop
ErrMsg
CheckADsError
ReportError
MsgBox
ErrMsg
FindSheet
CheckADsError
FindSheet
ErrMsg
FindSheet
ReportError
MsgBox
MsgBox
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE