Static task
static1
Behavioral task
behavioral1
Sample
da59cc17ba7eeb845eb747495b0de5c840262be39b42b17fdfe248531a77cb9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da59cc17ba7eeb845eb747495b0de5c840262be39b42b17fdfe248531a77cb9c.exe
Resource
win10v2004-20220901-en
General
-
Target
da59cc17ba7eeb845eb747495b0de5c840262be39b42b17fdfe248531a77cb9c
-
Size
809KB
-
MD5
0bedaf7c1ea30635278444fb50cce321
-
SHA1
fe3f05cea186371fe15080d3f6d55f92c2e132fa
-
SHA256
da59cc17ba7eeb845eb747495b0de5c840262be39b42b17fdfe248531a77cb9c
-
SHA512
5dae58580329d44a8f7e480c1148f007989b4345f6967ee0b151b6e81b661dbd50eb70117a87e6b80273591cc5212838ce327c7c9754e14446dfb9057634d8bc
-
SSDEEP
12288:E8xDWi+/Y6InQ8T3B2MzrnxA+nZkDesbl9k/hIAP1WDuXGXNKX62AUGHisDyeE/X:E8tWi+58N9PeLohIe1CuXGxCs9E/JR
Malware Config
Signatures
Files
-
da59cc17ba7eeb845eb747495b0de5c840262be39b42b17fdfe248531a77cb9c.exe windows x86
489e812309d84b8df9838e09752ce51c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
GetCommandLineA
AddAtomW
GetDriveTypeW
HeapSize
DeleteFileA
lstrcpyA
GetStartupInfoA
lstrlenW
GetPrivateProfileSectionW
WriteConsoleW
WriteConsoleW
SetEvent
GetProcessHeap
GetFileAttributesA
WriteConsoleW
CancelIo
VirtualProtect
LoadLibraryW
HeapDestroy
CopyFileA
mmcndmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
CreateExecutivePlatform
dsprop
MsgBox
ErrMsg
ErrMsg
CheckADsError
ErrMsg
MsgBox
FindSheet
CheckADsError
FindSheet
FindSheet
ReportError
MsgBox
ReportError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE