Static task
static1
Behavioral task
behavioral1
Sample
200e8e2080bf97159305a1ab8c774ca2801be46e1b90720cdca9401aeaa35daa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
200e8e2080bf97159305a1ab8c774ca2801be46e1b90720cdca9401aeaa35daa.exe
Resource
win10v2004-20220812-en
General
-
Target
200e8e2080bf97159305a1ab8c774ca2801be46e1b90720cdca9401aeaa35daa
-
Size
822KB
-
MD5
a2a32603fc62889a9e68506efd519ce0
-
SHA1
86a17df7a45d6f53cc39c07617135877f0556bc6
-
SHA256
200e8e2080bf97159305a1ab8c774ca2801be46e1b90720cdca9401aeaa35daa
-
SHA512
7be34e0fab2f13972be9fbd32b98c70868fbe23affaf950eed109f657b8a7d6efdcf24daccf538e09a892aaea5d3542dd2d1fa6c93d9b8cab136407b7d4443b7
-
SSDEEP
12288:iTrNQ8TcV/CSllMApdUuGwPJvqX5G9scCVk1du7fE1lj2IkcebYfxq+GrMQovIFZ:iTNYVRyuG2hkU9aGQOlCLTbYI+GrjtF
Malware Config
Signatures
Files
-
200e8e2080bf97159305a1ab8c774ca2801be46e1b90720cdca9401aeaa35daa.exe windows x86
bdf03a09266120b628376ed7c5db24e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetFileAttributesW
FindResourceA
GetVolumeInformationA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetModuleFileNameW
VirtualAlloc
GetDriveTypeA
lstrlenA
GetDriveTypeA
GetCurrentDirectoryW
GetDriveTypeA
GetModuleHandleA
DeleteFileW
IsBadStringPtrW
msxml3
DllGetClassObject
DllRegisterServer
DllMain
DllCanUnloadNow
Sections
.play Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.wdata Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ