Static task
static1
Behavioral task
behavioral1
Sample
14a5e2ad340b5fdacb66a254030599c6e63e7d6dd658342a312eef5c14f1a208.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
14a5e2ad340b5fdacb66a254030599c6e63e7d6dd658342a312eef5c14f1a208.exe
Resource
win10v2004-20220812-en
General
-
Target
14a5e2ad340b5fdacb66a254030599c6e63e7d6dd658342a312eef5c14f1a208
-
Size
108KB
-
MD5
91c0ee334d25cb2f045c092b243700f0
-
SHA1
0af8ccd6ee04e777ff9afbb8c134d5cb16975af7
-
SHA256
14a5e2ad340b5fdacb66a254030599c6e63e7d6dd658342a312eef5c14f1a208
-
SHA512
a3710ab5f1816fa39f34c726ba04e321d7985e1e96060744322d48da6535108f60e50b1afd63e7643fcf30e6b181ac2ccb7eec17c15593534aa7ec7ff74eccf1
-
SSDEEP
3072:YFWRwAHFn4aQBbBVsKi1gyPCa5OGOs3fpthRpsXx:+WiAl4acBHi+yPCgtRthfsXx
Malware Config
Signatures
Files
-
14a5e2ad340b5fdacb66a254030599c6e63e7d6dd658342a312eef5c14f1a208.exe windows x86
b04adbe8a0a9172beeb92adae42ec5d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
PulseEvent
TlsGetValue
ReadConsoleA
VirtualProtectEx
lstrlenA
Sleep
FindAtomW
CloseHandle
GetStringTypeW
SearchPathW
HeapSize
GetLogicalDrives
ReleaseMutex
DeleteFileW
GetDriveTypeA
ReadConsoleA
ReadConsoleA
GetLastError
GetStartupInfoA
LoadLibraryW
dsprop
ErrMsg
MsgBox
ReportError
MsgBox
ErrMsg
ReportError
ErrMsg
FindSheet
FindSheet
CheckADsError
MsgBox
CheckADsError
FindSheet
gpedit
DllGetClassObject
ExportRSoPData
BrowseForGPO
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 704B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE