Static task
static1
Behavioral task
behavioral1
Sample
860108493100e2d6754f2b20845cca3989d049ef637bd06e30896e84591682a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
860108493100e2d6754f2b20845cca3989d049ef637bd06e30896e84591682a4.exe
Resource
win10v2004-20220812-en
General
-
Target
860108493100e2d6754f2b20845cca3989d049ef637bd06e30896e84591682a4
-
Size
79KB
-
MD5
a16281a18afe69ca87e13351978b1e10
-
SHA1
8d6a51d06929f78d1948c8b46d1c8ddc33c66ea8
-
SHA256
860108493100e2d6754f2b20845cca3989d049ef637bd06e30896e84591682a4
-
SHA512
c7a331d510c7bd59151695198613f3c46530b6aa47a647ef844dbbc8632da550542cb788f9de9be2d6a08c805545dbb0c3345c091dcd9a5e4a6056a16076549d
-
SSDEEP
768:dtpWqjNRJ9gq8uqC6RdDPf3cArXAnfCdpRHotDVMM72VO7ilrHwjCHXD+BJOys1R:dtw0N79gkLgL1kYbSDeLr0KaUy5k
Malware Config
Signatures
Files
-
860108493100e2d6754f2b20845cca3989d049ef637bd06e30896e84591682a4.exe windows x86
d7764e87c9da2775838507b36f39a276
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleA
FindVolumeClose
DeleteAtom
GetDriveTypeW
Sleep
GetLogicalDrives
WriteConsoleA
LoadLibraryW
GetCommandLineA
VirtualProtect
HeapSize
CopyFileA
GetStartupInfoA
HeapDestroy
lstrcpyA
WriteConsoleA
AddAtomA
GetFileAttributesA
GetPrivateProfileSectionW
SetEvent
lstrlenW
dsprop
FindSheet
ErrMsg
MsgBox
ReportError
CheckADsError
ReportError
MsgBox
ErrMsg
MsgBox
FindSheet
FindSheet
CheckADsError
ErrMsg
mmcndmgr
DllCanUnloadNow
CreateExecutivePlatform
DllGetClassObject
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE