Static task
static1
Behavioral task
behavioral1
Sample
e59c4aee4b75aee1efaa485bdbc1d4e4d3bac0ea4d40cf1538e226b4d1765974.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e59c4aee4b75aee1efaa485bdbc1d4e4d3bac0ea4d40cf1538e226b4d1765974.exe
Resource
win10v2004-20220812-en
General
-
Target
e59c4aee4b75aee1efaa485bdbc1d4e4d3bac0ea4d40cf1538e226b4d1765974
-
Size
298KB
-
MD5
6b96c1b3721d9842f4c54abb37bec430
-
SHA1
72c3c6ec0c55323ef51089774e5ed79c98792c41
-
SHA256
e59c4aee4b75aee1efaa485bdbc1d4e4d3bac0ea4d40cf1538e226b4d1765974
-
SHA512
e3b454f0b18aba5d5cc2c4140ac2908f81ed91b70e6827c483f8817e9ad27facecf490d4f9cc4caf50f7057b987b365488ab79193cc537f556211445f25850af
-
SSDEEP
6144:4ZyV6Co8fuQ6dzj6jn6fRCr4iAIcVFeUVS4IIa7O:mCo82dzj6T6fImekSh7O
Malware Config
Signatures
Files
-
e59c4aee4b75aee1efaa485bdbc1d4e4d3bac0ea4d40cf1538e226b4d1765974.exe windows x86
f86e5e46eaffb631751fc866e2c5ea04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
WriteConsoleW
GetFileAttributesA
Sleep
lstrlenW
CancelIo
HeapSize
GetDriveTypeW
AddAtomW
GetCommandLineA
LoadLibraryW
WriteConsoleW
GetPrivateProfileSectionW
DeleteFileA
lstrcpyA
CopyFileA
SetEvent
GetProcessHeap
WriteConsoleW
VirtualProtect
HeapDestroy
mmcndmgr
CreateExecutivePlatform
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
dsprop
MsgBox
CheckADsError
FindSheet
FindSheet
MsgBox
ErrMsg
CheckADsError
ErrMsg
MsgBox
FindSheet
ReportError
ErrMsg
ReportError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE