Static task
static1
Behavioral task
behavioral1
Sample
9782472d6ca9faecdee1cc96e1e41045b8930cedcac7861f210053bfabfb346a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9782472d6ca9faecdee1cc96e1e41045b8930cedcac7861f210053bfabfb346a.exe
Resource
win10v2004-20220901-en
General
-
Target
9782472d6ca9faecdee1cc96e1e41045b8930cedcac7861f210053bfabfb346a
-
Size
114KB
-
MD5
8155808000a18246b88e3afb98b5dfd0
-
SHA1
8b1c21c483b2668479d8fe257e484c8c65773eb6
-
SHA256
9782472d6ca9faecdee1cc96e1e41045b8930cedcac7861f210053bfabfb346a
-
SHA512
13a746010758a5b63ca5712eaa400a3afb91850e327b33bacf203166ba282e873d18e392e43afd935289aa3e0e6470fb5093b2fb02b889337e931502ec969037
-
SSDEEP
3072:cVdF3PAUpMeVEE1j38llTxmtqWIwHh5WyF:SdF3PA2VE+KlkttH3F
Malware Config
Signatures
Files
-
9782472d6ca9faecdee1cc96e1e41045b8930cedcac7861f210053bfabfb346a.exe windows x86
8804e5af1a8b16b099e8a80ef8254908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
HeapSize
CancelIo
lstrlenW
GetProcessHeap
GetPrivateProfileSectionW
CopyFileA
GetCommandLineA
SetEvent
lstrcpyA
WriteConsoleW
GetStartupInfoA
HeapDestroy
GetFileAttributesA
GetDriveTypeW
WriteConsoleW
Sleep
WriteConsoleW
AddAtomW
LoadLibraryW
VirtualProtect
mmcndmgr
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
dsprop
MsgBox
CheckADsError
MsgBox
MsgBox
ErrMsg
FindSheet
FindSheet
ErrMsg
ErrMsg
CheckADsError
FindSheet
ReportError
ReportError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE