Static task
static1
Behavioral task
behavioral1
Sample
714328574820994d5dac10292435d3ba98c391ae9c94f5d5614dcfee33b80861.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
714328574820994d5dac10292435d3ba98c391ae9c94f5d5614dcfee33b80861.exe
Resource
win10v2004-20220812-en
General
-
Target
714328574820994d5dac10292435d3ba98c391ae9c94f5d5614dcfee33b80861
-
Size
63KB
-
MD5
053a90e959aa921f11ef1af811f37a20
-
SHA1
9d404c30e64d34c65cf2a24e2832ad487306e24f
-
SHA256
714328574820994d5dac10292435d3ba98c391ae9c94f5d5614dcfee33b80861
-
SHA512
c9c9bafa4371773a65c8400335c52254fef8421331dd5311a8a5a4d48d49a4018bef17e38143693b4db760006878afb7da4168d722fed3d207b39c6b8399d71d
-
SSDEEP
1536:8NHgYQx9g7dGfNaxvqg2sxFf3hNUzFuDWFtYcQYzGE:8SPxqGfN+qOF5NpQt14E
Malware Config
Signatures
Files
-
714328574820994d5dac10292435d3ba98c391ae9c94f5d5614dcfee33b80861.exe windows x86
7a814e868dba62a6e5dc6184bd941e1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
GetFileAttributesA
HeapDestroy
GetPrivateProfileSectionW
ReadConsoleA
SetEvent
CopyFileA
ReadConsoleA
FindAtomW
VirtualProtect
GetStringTypeW
CloseHandle
GetStartupInfoA
GetLastError
GetLogicalDrives
lstrlenW
GetDriveTypeW
Sleep
LoadLibraryW
AddAtomA
HeapSize
dsprop
ErrMsg
MsgBox
CheckADsError
ReportError
FindSheet
MsgBox
MsgBox
ErrMsg
FindSheet
ReportError
FindSheet
ErrMsg
CheckADsError
mmcndmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
CreateExecutivePlatform
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE