Static task
static1
Behavioral task
behavioral1
Sample
12ffa05f0b7fa7f3dbc6b9610ef44f5624cf4493f41b4f1528d569a5885946e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12ffa05f0b7fa7f3dbc6b9610ef44f5624cf4493f41b4f1528d569a5885946e0.exe
Resource
win10v2004-20220812-en
General
-
Target
12ffa05f0b7fa7f3dbc6b9610ef44f5624cf4493f41b4f1528d569a5885946e0
-
Size
116KB
-
MD5
933ccc79b6d65db998d4bcdc03e78640
-
SHA1
ca5d7246df4935a5a90a64cacd79f6899e755a61
-
SHA256
12ffa05f0b7fa7f3dbc6b9610ef44f5624cf4493f41b4f1528d569a5885946e0
-
SHA512
b941e9e5d2f66d1260b08066bb1b43863417f4064c487741add2dfb10f8def00063f0e14e2a58e582a11d32a207081feb67cffa2d3175d2d27dadae252696420
-
SSDEEP
3072:eCk4BxL+PVs7CX2X5h9lVJgZSmfvumE+:D5D+PL2phdm36+
Malware Config
Signatures
Files
-
12ffa05f0b7fa7f3dbc6b9610ef44f5624cf4493f41b4f1528d569a5885946e0.exe windows x86
08c09f2bd8ca671e18a3db6357ece491
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomW
Sleep
WriteConsoleW
lstrcpyA
DeleteFileA
GetPrivateProfileSectionW
GetStartupInfoA
GetDriveTypeW
CancelIo
GetCommandLineA
GetFileAttributesA
WriteConsoleW
WriteConsoleW
SetEvent
HeapSize
LoadLibraryW
GetProcessHeap
VirtualProtect
HeapDestroy
lstrlenW
CopyFileA
mmcndmgr
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
dsprop
FindSheet
ErrMsg
FindSheet
ReportError
MsgBox
ReportError
MsgBox
CheckADsError
ErrMsg
CheckADsError
ErrMsg
MsgBox
FindSheet
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE