Static task
static1
Behavioral task
behavioral1
Sample
630f99939b5e1cc5b9791accdf17a83c0f60593ef2ce1229aba77e0f81741d5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
630f99939b5e1cc5b9791accdf17a83c0f60593ef2ce1229aba77e0f81741d5b.exe
Resource
win10v2004-20220812-en
General
-
Target
630f99939b5e1cc5b9791accdf17a83c0f60593ef2ce1229aba77e0f81741d5b
-
Size
65KB
-
MD5
8244624320b0523f048e7ce177e69d80
-
SHA1
5db8d80477691044c2b4082731e57abef5462113
-
SHA256
630f99939b5e1cc5b9791accdf17a83c0f60593ef2ce1229aba77e0f81741d5b
-
SHA512
1198cde6cd63421128ffdd4ecf64a3e3334e0210dd5e3c165d9aea92c475ca0961de28ba6f62baefc0725c582c7df0c47b63db1e95e51a5e29c9a17e0fb51496
-
SSDEEP
1536:GcmI9S1kMzYnleD1H0R95epQpzAUdAbbwSQRZmVR:OGhleyheK7dAfw/Xm
Malware Config
Signatures
Files
-
630f99939b5e1cc5b9791accdf17a83c0f60593ef2ce1229aba77e0f81741d5b.exe windows x86
224fa77b0d321b7c6f39a31f1e6fce3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleA
GetCommandLineA
GetStartupInfoA
GetLogicalDrives
Sleep
lstrlenW
lstrcpyA
WriteConsoleA
GetDriveTypeW
VirtualProtect
AddAtomA
LoadLibraryW
DeleteAtom
CopyFileA
WriteConsoleA
HeapDestroy
HeapSize
GetFileAttributesA
GetPrivateProfileSectionW
FindVolumeClose
SetEvent
mmcndmgr
CreateExecutivePlatform
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
dsprop
MsgBox
CheckADsError
CheckADsError
ErrMsg
FindSheet
ReportError
FindSheet
MsgBox
FindSheet
ReportError
ErrMsg
MsgBox
ErrMsg
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 332B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE