Static task
static1
Behavioral task
behavioral1
Sample
e051e4b11f63a33edb1947a746cd857eb6e76256e97cf72c39675d8f7eeaa7fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e051e4b11f63a33edb1947a746cd857eb6e76256e97cf72c39675d8f7eeaa7fc.exe
Resource
win10v2004-20220812-en
General
-
Target
e051e4b11f63a33edb1947a746cd857eb6e76256e97cf72c39675d8f7eeaa7fc
-
Size
392KB
-
MD5
637ae5a6f2be54ffc94501fa789fed30
-
SHA1
7395165d13c58c27e81322317402f10ce290fa11
-
SHA256
e051e4b11f63a33edb1947a746cd857eb6e76256e97cf72c39675d8f7eeaa7fc
-
SHA512
f403013277efe24299f3fc9a4650dd5b56bf394446925f0a91bbb217fcef61d4056694da5b4efb3c101c97824547a707362539aa8d74dee319954aaebd1498cd
-
SSDEEP
12288:RnzFzgk7tkwaNf7mW4FquDqkSwqHYdop4kB5oXRE6:RhzgkFaYyW9Sw7dopngBE
Malware Config
Signatures
Files
-
e051e4b11f63a33edb1947a746cd857eb6e76256e97cf72c39675d8f7eeaa7fc.exe windows x86
391c7345f1a28a552166f6127267fefa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
GetDriveTypeW
SetEvent
CopyFileA
AddAtomA
Sleep
WriteConsoleA
WriteConsoleA
GetPrivateProfileSectionW
lstrlenW
WriteConsoleA
GetStartupInfoA
GetFileAttributesA
lstrcpyA
HeapDestroy
GetCommandLineA
FindVolumeClose
VirtualProtect
GetLogicalDrives
LoadLibraryW
DeleteAtom
dsprop
CheckADsError
ErrMsg
FindSheet
MsgBox
ReportError
CheckADsError
MsgBox
FindSheet
ErrMsg
ReportError
MsgBox
ErrMsg
FindSheet
mmcndmgr
CreateExecutivePlatform
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 496KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE