Static task
static1
Behavioral task
behavioral1
Sample
eedecc35fa7ac3e1e55910204b2207d45487a1bc2383328e5f0628b117728fbe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eedecc35fa7ac3e1e55910204b2207d45487a1bc2383328e5f0628b117728fbe.exe
Resource
win10v2004-20220812-en
General
-
Target
eedecc35fa7ac3e1e55910204b2207d45487a1bc2383328e5f0628b117728fbe
-
Size
62KB
-
MD5
4fcbdfe4a16b9691330e445cad5b99f0
-
SHA1
88a1781dce22e88c148c2009c0364bc1fce9e73a
-
SHA256
eedecc35fa7ac3e1e55910204b2207d45487a1bc2383328e5f0628b117728fbe
-
SHA512
91d90bff82eba968b5c0a9b72fbb1b10c233300d2608bc3f735232dfbea45a9af2f3b8336b507d6ecf7fc1118026121be30c1678818afee1623a187ed6b08345
-
SSDEEP
1536:QbvKwggRQf8Zmq39jYZWkesgrUttUt9hHFmhsAC:QOwlQfXqVYBesgrUtt0ZmK
Malware Config
Signatures
Files
-
eedecc35fa7ac3e1e55910204b2207d45487a1bc2383328e5f0628b117728fbe.exe windows x86
2f63b446516812d7903038044d076344
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
FindAtomW
LoadLibraryW
GetDriveTypeA
DeleteFileW
Sleep
GetStringTypeW
CloseHandle
lstrlenA
GetLogicalDrives
TlsGetValue
VirtualProtectEx
ReleaseMutex
GetPrivateProfileSectionA
GetStartupInfoA
GetLastError
HeapSize
CopyFileA
ReadConsoleA
ReadConsoleA
PulseEvent
dsprop
CheckADsError
MsgBox
ErrMsg
FindSheet
CheckADsError
ReportError
ErrMsg
FindSheet
MsgBox
ErrMsg
FindSheet
ReportError
MsgBox
gpedit
ExportRSoPData
BrowseForGPO
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 773B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE