Static task
static1
Behavioral task
behavioral1
Sample
7e85acc1f15fc32ffb4dcf54baba524ed0625ea8d605f54c26da1d0d5438fefc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7e85acc1f15fc32ffb4dcf54baba524ed0625ea8d605f54c26da1d0d5438fefc.exe
Resource
win10v2004-20220812-en
General
-
Target
7e85acc1f15fc32ffb4dcf54baba524ed0625ea8d605f54c26da1d0d5438fefc
-
Size
807KB
-
MD5
83c001d507bc9cd40b1c643cf788ca70
-
SHA1
3e4a16b8cd86048ce6babc5606fa7266da38e33e
-
SHA256
7e85acc1f15fc32ffb4dcf54baba524ed0625ea8d605f54c26da1d0d5438fefc
-
SHA512
a90902cf9b0d5f6ce3655aa894a5f28027c29e66d7167fae8a3333088539d6cc6a44954cbc16e04589c57482d50aa7ed874cf52e3eedfa17261d3c0239a4366b
-
SSDEEP
24576:4iMVKK+VdEpH/OQaKQDzW9pIZXpiGX33XGUYH:ru0dktaKQO9pIZXhK
Malware Config
Signatures
Files
-
7e85acc1f15fc32ffb4dcf54baba524ed0625ea8d605f54c26da1d0d5438fefc.exe windows x86
7a548423bda775b88b446d6039a234b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionW
lstrlenW
GetLogicalDrives
GetStartupInfoA
CopyFileA
SetEvent
GetDriveTypeW
VirtualProtect
HeapDestroy
HeapSize
GetLastError
Sleep
LoadLibraryW
GetStringTypeW
FindAtomW
ReadConsoleA
GetFileAttributesA
ReadConsoleA
AddAtomA
CloseHandle
ReadConsoleA
dsprop
MsgBox
ErrMsg
FindSheet
CheckADsError
ErrMsg
ErrMsg
ReportError
MsgBox
FindSheet
ReportError
FindSheet
CheckADsError
MsgBox
mmcndmgr
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
CreateExecutivePlatform
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE