Static task
static1
Behavioral task
behavioral1
Sample
e97d2ae5598964b19eb40c18f0798b2d8264fb877ce0f16052778458c057d596.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e97d2ae5598964b19eb40c18f0798b2d8264fb877ce0f16052778458c057d596.exe
Resource
win10v2004-20220812-en
General
-
Target
e97d2ae5598964b19eb40c18f0798b2d8264fb877ce0f16052778458c057d596
-
Size
807KB
-
MD5
8221fa9ae01d80a2e8a208d71914e7e0
-
SHA1
746757697f860e469a62c60b535316313461416c
-
SHA256
e97d2ae5598964b19eb40c18f0798b2d8264fb877ce0f16052778458c057d596
-
SHA512
9cf621a198d6bd6b8b86f8caeb9dea0c7fa774c46fd34c6108124e08c36eb05b0466da10cddca852bcdb6e6dc2553a06b148a21dd73ba0e825f0b433c0c7c155
-
SSDEEP
24576:LiM/Xc+95kQPHFqO22FGTQG3v8oKOSZfR2m:e2s2SQdqUFtGf8pR
Malware Config
Signatures
Files
-
e97d2ae5598964b19eb40c18f0798b2d8264fb877ce0f16052778458c057d596.exe windows x86
357a30258e15d3fe2b1804df4ca9db76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryW
GetStringTypeW
HeapDestroy
SetEvent
CopyFileA
GetDriveTypeW
VirtualProtect
GetPrivateProfileSectionW
ReadConsoleA
ReadConsoleA
CloseHandle
GetFileAttributesA
ReleaseMutex
GetLastError
HeapSize
ReadConsoleA
FindAtomW
Sleep
lstrlenW
GetStartupInfoA
GetLogicalDrives
dsprop
FindSheet
CheckADsError
MsgBox
ErrMsg
ErrMsg
ReportError
FindSheet
CheckADsError
MsgBox
ErrMsg
ReportError
FindSheet
MsgBox
gpedit
BrowseForGPO
ExportRSoPData
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 789B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE