Static task
static1
Behavioral task
behavioral1
Sample
c8f74082c2e1fcd4c689328f66dee82b3e2b7dec20e002e4319e034563fe8749.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8f74082c2e1fcd4c689328f66dee82b3e2b7dec20e002e4319e034563fe8749.exe
Resource
win10v2004-20220812-en
General
-
Target
c8f74082c2e1fcd4c689328f66dee82b3e2b7dec20e002e4319e034563fe8749
-
Size
63KB
-
MD5
8337910c33900691a32708f2c89054d0
-
SHA1
a50dd426c3fc779b0de9425fe270cf6fe0b4a8fa
-
SHA256
c8f74082c2e1fcd4c689328f66dee82b3e2b7dec20e002e4319e034563fe8749
-
SHA512
3a7d5b9fcfb445d21b69ed44b8b9d71b6c30f73b66c41abb65a9f5d63f326c604e930723d0e78880396d1f195f569363dbc35ece90c06f4014be347d7665bab2
-
SSDEEP
1536:t0s4DQCcb6EjBUF317gcp370k5WfOcOE3Ue:tkhPFRgcZ70oWrOMD
Malware Config
Signatures
Files
-
c8f74082c2e1fcd4c689328f66dee82b3e2b7dec20e002e4319e034563fe8749.exe windows x86
1c2d43c03d4a82a8fbf394c71d76e34a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionW
LoadLibraryW
ReadConsoleA
GetStringTypeW
GetLogicalDrives
GetLastError
CloseHandle
GetStartupInfoA
HeapDestroy
VirtualProtect
AddAtomA
FindAtomW
lstrlenW
HeapSize
GetDriveTypeW
CopyFileA
ReadConsoleA
SetEvent
GetFileAttributesA
ReadConsoleA
Sleep
dsprop
FindSheet
MsgBox
ErrMsg
CheckADsError
ReportError
MsgBox
ErrMsg
MsgBox
FindSheet
ErrMsg
ReportError
FindSheet
CheckADsError
mmcndmgr
CreateExecutivePlatform
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE