Static task
static1
Behavioral task
behavioral1
Sample
069dfcba5f69f868363a8a554a90213efd0ce7d1286985c5c437b6ee8650ae48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
069dfcba5f69f868363a8a554a90213efd0ce7d1286985c5c437b6ee8650ae48.exe
Resource
win10v2004-20220901-en
General
-
Target
069dfcba5f69f868363a8a554a90213efd0ce7d1286985c5c437b6ee8650ae48
-
Size
297KB
-
MD5
51dcdea7133a270bf02bfcd7a8e36555
-
SHA1
60fdacb5d2ba868216ea006143217a1799546d78
-
SHA256
069dfcba5f69f868363a8a554a90213efd0ce7d1286985c5c437b6ee8650ae48
-
SHA512
9d1843863c8943df1011375be5ece095c98b438b868faf19fce807deec8729411ae0be2d1d33558ec3667041cc23a489591f8f77b6a8295a376d7392c9c71587
-
SSDEEP
6144:5DyVxN5Gtg3oPT2GQG0YsQjBxT3r1oxD8CpRJlWxjZuSD:5gd3m2G90Y1jBB35oRRLlcjZD
Malware Config
Signatures
Files
-
069dfcba5f69f868363a8a554a90213efd0ce7d1286985c5c437b6ee8650ae48.exe windows x86
921d2e72da4266f03d331ea99714d020
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionW
lstrcpyA
SetEvent
AddAtomA
GetStartupInfoA
Sleep
GetFileAttributesA
HeapSize
WriteConsoleA
WriteConsoleA
CopyFileA
GetLogicalDrives
DeleteAtom
LoadLibraryW
HeapDestroy
FindVolumeClose
GetDriveTypeW
WriteConsoleA
VirtualProtect
lstrlenW
GetCommandLineA
dsprop
FindSheet
ErrMsg
MsgBox
ReportError
CheckADsError
ErrMsg
ErrMsg
FindSheet
MsgBox
MsgBox
CheckADsError
FindSheet
ReportError
mmcndmgr
DllRegisterServer
DllCanUnloadNow
CreateExecutivePlatform
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE