Static task
static1
Behavioral task
behavioral1
Sample
ec246c72f84bdb53a6bc542e31cd95d1d9452665f61d6391f4d37fbe96180ba8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec246c72f84bdb53a6bc542e31cd95d1d9452665f61d6391f4d37fbe96180ba8.exe
Resource
win10v2004-20220812-en
General
-
Target
ec246c72f84bdb53a6bc542e31cd95d1d9452665f61d6391f4d37fbe96180ba8
-
Size
298KB
-
MD5
7cd7b474199c9cfce1c48b8f0864f421
-
SHA1
0980c127390dd1cab91f2cec7406a9fbc1b6e0bd
-
SHA256
ec246c72f84bdb53a6bc542e31cd95d1d9452665f61d6391f4d37fbe96180ba8
-
SHA512
55f175af4c4b92691d25f2c616b7d6ce2606c76d4eb38a09c966040030e32300f68a67a638b9570cf98c80d0b63d94304ef65d279b87e09902b102b21ad8bef1
-
SSDEEP
6144:dMoyVLksoHqLXry5XztVlo3Ih9YyzXPascxY460h2Xu1l5MSv:dMus3bIXrlo3IoyDysbTC535MSv
Malware Config
Signatures
Files
-
ec246c72f84bdb53a6bc542e31cd95d1d9452665f61d6391f4d37fbe96180ba8.exe windows x86
29839a0f961b02bfd5e169c4edf419aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
VirtualProtect
GetFileAttributesA
lstrlenW
LoadLibraryW
GetDriveTypeW
WriteConsoleW
Sleep
WriteConsoleW
DeleteFileA
AddAtomW
GetStartupInfoA
GetCommandLineA
SetEvent
lstrcpyA
WriteConsoleW
HeapDestroy
GetProcessHeap
HeapSize
CopyFileA
GetPrivateProfileSectionW
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
dsprop
MsgBox
ReportError
CheckADsError
ErrMsg
FindSheet
FindSheet
CheckADsError
ErrMsg
ErrMsg
MsgBox
MsgBox
ReportError
FindSheet
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE