Static task
static1
Behavioral task
behavioral1
Sample
7fb3ddb815f2db6989e0d4c735f9ce2093b25e163ec476d91458f6a154630e61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fb3ddb815f2db6989e0d4c735f9ce2093b25e163ec476d91458f6a154630e61.exe
Resource
win10v2004-20220812-en
General
-
Target
7fb3ddb815f2db6989e0d4c735f9ce2093b25e163ec476d91458f6a154630e61
-
Size
809KB
-
MD5
6998721b26b1b35bd21b2db703fdb99d
-
SHA1
b7bf748c732b49b33133bfa1b93371389f1d09df
-
SHA256
7fb3ddb815f2db6989e0d4c735f9ce2093b25e163ec476d91458f6a154630e61
-
SHA512
f390dbf9e50d0d737f87712e738619ce123b76b3cce39442585bc5e1643eced6f8b079f0b1b4184e76f13a0feb6b8ca95df0d8868430279e02f7bb7695fc52e9
-
SSDEEP
24576:1ElnwCgOcxXMo8AQmVUhP01Cn86vHaBVSEOEQ6Vvzc4gj:1KwCg7Mo8AQGdC8+HISfMtcfj
Malware Config
Signatures
Files
-
7fb3ddb815f2db6989e0d4c735f9ce2093b25e163ec476d91458f6a154630e61.exe windows x86
8a49d0d1f232807c85133399f1a40364
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionW
WriteConsoleA
HeapSize
lstrlenW
GetLogicalDrives
LoadLibraryW
WriteConsoleA
HeapDestroy
GetDriveTypeW
GetStartupInfoA
VirtualProtect
CopyFileA
DeleteAtom
SetEvent
Sleep
lstrcpyA
WriteConsoleA
FindVolumeClose
GetCommandLineA
GetFileAttributesA
AddAtomA
dsprop
MsgBox
CheckADsError
ReportError
ErrMsg
FindSheet
ReportError
ErrMsg
CheckADsError
FindSheet
MsgBox
FindSheet
ErrMsg
MsgBox
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
CreateExecutivePlatform
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE