Static task
static1
Behavioral task
behavioral1
Sample
a7315c2574b14552591e102d1518e9db3672925cbd2daa23e4de5e55ea4781dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7315c2574b14552591e102d1518e9db3672925cbd2daa23e4de5e55ea4781dc.exe
Resource
win10v2004-20220812-en
General
-
Target
a7315c2574b14552591e102d1518e9db3672925cbd2daa23e4de5e55ea4781dc
-
Size
297KB
-
MD5
09ad8dd91f54bd14452355fd6255e450
-
SHA1
c4a923ddfe7b0909903adeac9fc102c26c522895
-
SHA256
a7315c2574b14552591e102d1518e9db3672925cbd2daa23e4de5e55ea4781dc
-
SHA512
9f4bc0eafd1d2cd3994fc44eb22149cd6af7e8d9abd9c534ba909fd0e1979ff1061041eff92074565ee63a988a4c778a616c7989fa07e78fa3165ad6e6266225
-
SSDEEP
6144:oX9yVQ2JYyaYCHsjffxsJjBj8WPLiRcDhheLoHq3R2pwMaqwd:oXv4YRYx2jvuGhheEK3R2Gdd
Malware Config
Signatures
Files
-
a7315c2574b14552591e102d1518e9db3672925cbd2daa23e4de5e55ea4781dc.exe windows x86
f33b4f3782393a63c0d5940ffdc3cb2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetStartupInfoA
Sleep
VirtualProtect
SetEvent
lstrlenW
CopyFileA
HeapSize
FindVolumeClose
GetStringTypeW
AddAtomA
ReadConsoleA
DeleteAtom
ReadConsoleA
GetCommandLineA
GetDriveTypeW
ReadConsoleA
GetFileAttributesA
LoadLibraryW
GetLogicalDrives
GetPrivateProfileSectionW
dsprop
CheckADsError
MsgBox
MsgBox
ErrMsg
FindSheet
ErrMsg
FindSheet
ErrMsg
CheckADsError
MsgBox
FindSheet
ReportError
ReportError
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
CreateExecutivePlatform
Sections
.text Size: 1024B - Virtual size: 803B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE