Static task
static1
Behavioral task
behavioral1
Sample
c40b2fe2e25b3f808389439869bcd040e4c0260e7b9c1157fe4038ac161b00fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c40b2fe2e25b3f808389439869bcd040e4c0260e7b9c1157fe4038ac161b00fd.exe
Resource
win10v2004-20220812-en
General
-
Target
c40b2fe2e25b3f808389439869bcd040e4c0260e7b9c1157fe4038ac161b00fd
-
Size
297KB
-
MD5
83cd2f5a0a478b2933bdc2598ebc76a0
-
SHA1
4f0efa62624dc2de5fd12e2ef51aab8dc3a44fef
-
SHA256
c40b2fe2e25b3f808389439869bcd040e4c0260e7b9c1157fe4038ac161b00fd
-
SHA512
6400b3a48bcb5df6f08a3b442d3ab3c96e57b65133373cddda5c0adc947177bffe028896fceddb9a892986585db14942d453f1b9c60f53469541d44b098e8199
-
SSDEEP
6144:jTarJT8yVK+zXxwhemh4lZmKlkcn7peQQFYcWDb2+EharUQQq3CdpU5w47TXpNiG:XoJ6hbcH5peviBEhzUqpU5hpkO2
Malware Config
Signatures
Files
-
c40b2fe2e25b3f808389439869bcd040e4c0260e7b9c1157fe4038ac161b00fd.exe windows x86
97c28598cc348cb4328ae5f665cebb31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
AddAtomA
ReadConsoleA
GetCommandLineA
ReadConsoleA
VirtualProtect
GetPrivateProfileSectionW
GetDriveTypeW
HeapSize
lstrlenW
GetLogicalDrives
ReadConsoleA
DeleteAtom
GetFileAttributesA
FindVolumeClose
Sleep
LoadLibraryW
CopyFileA
GetStringTypeW
SetEvent
HeapDestroy
dsprop
FindSheet
CheckADsError
ReportError
ErrMsg
ErrMsg
FindSheet
CheckADsError
FindSheet
ReportError
ErrMsg
MsgBox
MsgBox
MsgBox
mmcndmgr
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
CreateExecutivePlatform
Sections
.text Size: 1024B - Virtual size: 778B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE