Static task
static1
Behavioral task
behavioral1
Sample
82a8716635f3546dda1abb793d7e55e97ead5d811c1068f9c3cce85186c37c2b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82a8716635f3546dda1abb793d7e55e97ead5d811c1068f9c3cce85186c37c2b.exe
Resource
win10v2004-20220812-en
General
-
Target
82a8716635f3546dda1abb793d7e55e97ead5d811c1068f9c3cce85186c37c2b
-
Size
297KB
-
MD5
4e8d5aedc7dc5216df1ea3699f43a840
-
SHA1
a874745e7c5c14ef8ba37cf31cbf987611624223
-
SHA256
82a8716635f3546dda1abb793d7e55e97ead5d811c1068f9c3cce85186c37c2b
-
SHA512
12f9b8e48949611d4b92e1a5fdd88ab855fd7991f3bc06cb9613918ea8063863b5bbd4a2c103d8fad60eda1b70a9d3f95b3806d84a1a2a75f8691b47ee3e675a
-
SSDEEP
6144:ijVltyVSVHK4xjn59fJYeCcZuf1k0CpGBgxt90UV3vM0h1JTFqc0:GlK4xjHjgf18c+0Iv3JT4c0
Malware Config
Signatures
Files
-
82a8716635f3546dda1abb793d7e55e97ead5d811c1068f9c3cce85186c37c2b.exe windows x86
d75719422b991e76fe1b1bad7901f42a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
GetStringTypeW
ReadConsoleA
VirtualProtect
Sleep
GetFileAttributesA
GetStartupInfoA
LoadLibraryW
lstrlenW
ReadConsoleA
CloseHandle
CopyFileA
ReleaseMutex
FindAtomW
ReadConsoleA
GetPrivateProfileSectionW
GetLogicalDrives
GetLastError
SetEvent
HeapDestroy
HeapSize
dsprop
FindSheet
CheckADsError
FindSheet
ErrMsg
CheckADsError
ReportError
MsgBox
ReportError
MsgBox
MsgBox
ErrMsg
FindSheet
ErrMsg
gpedit
BrowseForGPO
DllCanUnloadNow
ExportRSoPData
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 789B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE