Static task
static1
Behavioral task
behavioral1
Sample
08d326936e5ba70641e152df5b972902437d295492ef13fbcb6f6ed6abd0dd6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08d326936e5ba70641e152df5b972902437d295492ef13fbcb6f6ed6abd0dd6b.exe
Resource
win10v2004-20220812-en
General
-
Target
08d326936e5ba70641e152df5b972902437d295492ef13fbcb6f6ed6abd0dd6b
-
Size
298KB
-
MD5
90a383e8c7d2dcf84df23681cac78680
-
SHA1
7d0bcd728f297f92cbba717c81d1407b53e68037
-
SHA256
08d326936e5ba70641e152df5b972902437d295492ef13fbcb6f6ed6abd0dd6b
-
SHA512
68e05f0864451dccdc18cfd8d606552b75e96049403014322ef1cd71c9a320b2d8d603921b84a3ca492e3989d7fdec1c172f0cfafe797942034b4789d3ec6fe9
-
SSDEEP
6144:aG3UyV7tkx3NIEXgWN5bNLCFyFO3IbOnItWIFe6faydVEaTsDjdE:vd03NdwWTRCF33IKnyFeUaKFiE
Malware Config
Signatures
Files
-
08d326936e5ba70641e152df5b972902437d295492ef13fbcb6f6ed6abd0dd6b.exe windows x86
a7816b0c73bf034959019222af5454cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
lstrlenW
GetPrivateProfileSectionW
GetCommandLineA
HeapSize
WriteConsoleW
GetFileAttributesA
Sleep
DeleteFileA
lstrcpyA
HeapDestroy
WriteConsoleW
GetProcessHeap
LoadLibraryW
SetEvent
WriteConsoleW
CopyFileA
CancelIo
GetDriveTypeW
VirtualProtect
AddAtomW
mmcndmgr
CreateExecutivePlatform
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
dsprop
ErrMsg
ErrMsg
CheckADsError
FindSheet
MsgBox
MsgBox
ErrMsg
MsgBox
FindSheet
ReportError
CheckADsError
ReportError
FindSheet
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE