Static task
static1
Behavioral task
behavioral1
Sample
a89766bce0e8ec48adc7b3dc06ce0d6fc82b11df20ee4ffda0d27292845d5b93.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a89766bce0e8ec48adc7b3dc06ce0d6fc82b11df20ee4ffda0d27292845d5b93.exe
Resource
win10v2004-20220812-en
General
-
Target
a89766bce0e8ec48adc7b3dc06ce0d6fc82b11df20ee4ffda0d27292845d5b93
-
Size
115KB
-
MD5
9038724ab3010646349ed21736d46bc0
-
SHA1
3a2af975803ea1d61faf1858ce57fb5bea9d87d9
-
SHA256
a89766bce0e8ec48adc7b3dc06ce0d6fc82b11df20ee4ffda0d27292845d5b93
-
SHA512
c5d8ecc680ac73faebf906b63afb262dfe5ef4dfb1b57dec5608685ba7274831b17f177ac4f3b208b139486dd6d1b0e7893b02aaa1ddfaafefc3ad20eb9c48d0
-
SSDEEP
3072:isZl+b3e2d0mD3JbrmDAKbQbhGCk4DIF7X4nCTs2Rysln:Pl+buUz3J+0hvH07X4nCXDln
Malware Config
Signatures
Files
-
a89766bce0e8ec48adc7b3dc06ce0d6fc82b11df20ee4ffda0d27292845d5b93.exe windows x86
fc1e0574c001591cdecdfc9cfb01c496
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
GetPrivateProfileSectionA
ReadConsoleA
LoadLibraryW
GetStartupInfoA
TlsGetValue
SearchPathW
GetLogicalDrives
FindAtomW
GetDriveTypeA
Sleep
VirtualProtectEx
ReadConsoleA
GetStringTypeW
HeapSize
DeleteFileW
PulseEvent
GetLastError
CloseHandle
lstrlenA
ReleaseMutex
dsprop
MsgBox
ReportError
MsgBox
ErrMsg
ErrMsg
CheckADsError
ReportError
FindSheet
MsgBox
FindSheet
CheckADsError
ErrMsg
FindSheet
gpedit
DllCanUnloadNow
BrowseForGPO
ExportRSoPData
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 704B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE