Static task
static1
Behavioral task
behavioral1
Sample
4ff92f214283706704b76e58db1d19ad15aefd6ff40b59a052347fa4685974a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ff92f214283706704b76e58db1d19ad15aefd6ff40b59a052347fa4685974a4.exe
Resource
win10v2004-20220812-en
General
-
Target
4ff92f214283706704b76e58db1d19ad15aefd6ff40b59a052347fa4685974a4
-
Size
809KB
-
MD5
0dd033a97b92aa8f34d11458678b4f32
-
SHA1
169c9fd268d275ff7e9e2773fff4553c5b7605ee
-
SHA256
4ff92f214283706704b76e58db1d19ad15aefd6ff40b59a052347fa4685974a4
-
SHA512
e9e89b091cf706df7276e69a21218dfa1132fc738ba16aa940c94d74697bcdc42456597d68db27c916bf8a595f1de5f2533a49c4e6c15eb63f874da10e4f138c
-
SSDEEP
24576:vpL0OTom3R9tVApmbBDQbEU2QbX5SobaJU:+QoGnApmNDhUt4WW
Malware Config
Signatures
Files
-
4ff92f214283706704b76e58db1d19ad15aefd6ff40b59a052347fa4685974a4.exe windows x86
2a8170f984e63d6b8cd8f11f8b841089
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
DeleteAtom
GetFileAttributesA
HeapDestroy
GetLogicalDrives
WriteConsoleA
GetPrivateProfileSectionW
CopyFileA
WriteConsoleA
SetEvent
HeapSize
FindVolumeClose
LoadLibraryW
AddAtomA
VirtualProtect
Sleep
GetStartupInfoA
lstrlenW
WriteConsoleA
lstrcpyA
GetCommandLineA
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
CreateExecutivePlatform
dsprop
CheckADsError
CheckADsError
MsgBox
ReportError
ErrMsg
ErrMsg
MsgBox
ReportError
MsgBox
ErrMsg
FindSheet
FindSheet
FindSheet
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE