Static task
static1
Behavioral task
behavioral1
Sample
cff73516afeec18fab9b0d6d2f94aab6dd3180feb8c5e0d2941bcf829a166ec0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cff73516afeec18fab9b0d6d2f94aab6dd3180feb8c5e0d2941bcf829a166ec0.exe
Resource
win10v2004-20220812-en
General
-
Target
cff73516afeec18fab9b0d6d2f94aab6dd3180feb8c5e0d2941bcf829a166ec0
-
Size
110KB
-
MD5
0637f5f4ae85af221810ea002e44530f
-
SHA1
8dec5a1e25e5f2e300efad797d74992353fbf504
-
SHA256
cff73516afeec18fab9b0d6d2f94aab6dd3180feb8c5e0d2941bcf829a166ec0
-
SHA512
97250abb69a1a9c207c9ae764d202bde5dd8191f1903037a993ecab55d2cf1c3aa9d1b062f8073a61d24c0ca6bc4a41e82e991edd04efc5954a6cdffb098496e
-
SSDEEP
3072:Zg1TsL4STc1ZXi+1lS0eTEz8+vqieApX9CGDu:yTbiYktRo9TDu
Malware Config
Signatures
Files
-
cff73516afeec18fab9b0d6d2f94aab6dd3180feb8c5e0d2941bcf829a166ec0.exe windows x86
4c11888a4d01a464ddce0a213169020c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteAtom
AddAtomA
HeapDestroy
Sleep
GetPrivateProfileSectionW
GetFileAttributesA
GetCommandLineA
SetEvent
CopyFileA
HeapSize
ReadConsoleA
ReadConsoleA
GetLogicalDrives
lstrlenW
ReadConsoleA
GetDriveTypeW
GetStartupInfoA
GetStringTypeW
LoadLibraryW
VirtualProtect
FindVolumeClose
dsprop
CheckADsError
ErrMsg
ReportError
FindSheet
ReportError
MsgBox
ErrMsg
FindSheet
ErrMsg
CheckADsError
FindSheet
MsgBox
MsgBox
mmcndmgr
CreateExecutivePlatform
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 778B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE