Static task
static1
Behavioral task
behavioral1
Sample
e377d3df3a6e475c7741ed4ea975991223c7c899677ef7cb08557f8199ec1c4f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e377d3df3a6e475c7741ed4ea975991223c7c899677ef7cb08557f8199ec1c4f.exe
Resource
win10v2004-20220812-en
General
-
Target
e377d3df3a6e475c7741ed4ea975991223c7c899677ef7cb08557f8199ec1c4f
-
Size
809KB
-
MD5
03b038462118b1019fdfd69265445972
-
SHA1
18c4bddbd58c6283fae431238f233c9b427fc97a
-
SHA256
e377d3df3a6e475c7741ed4ea975991223c7c899677ef7cb08557f8199ec1c4f
-
SHA512
aa2bcc24266caffa51064b0ec13311aea7595eee281ae059aab475f1a57face68cae4041ed1e8d74d339264638818189ed4f8e3ac3958d28226dd007f8be3f08
-
SSDEEP
12288:/wIWV8Mn99vyPXQQb+YW5IjmHFCXQFZWS6QKDul5qph8gQBtFADD+aQmIorr94I:YIu/vOXVXgxLzKD4LDtN7forrK
Malware Config
Signatures
Files
-
e377d3df3a6e475c7741ed4ea975991223c7c899677ef7cb08557f8199ec1c4f.exe windows x86
09f756ef12fe9856ef16cd34d252a675
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenW
HeapDestroy
LoadLibraryW
WriteConsoleA
GetStartupInfoA
GetCommandLineA
WriteConsoleA
lstrcpyA
VirtualProtect
HeapSize
Sleep
SetEvent
AddAtomA
GetPrivateProfileSectionW
DeleteAtom
GetDriveTypeW
GetFileAttributesA
FindVolumeClose
GetLogicalDrives
CopyFileA
WriteConsoleA
mmcndmgr
DllRegisterServer
DllGetClassObject
CreateExecutivePlatform
DllCanUnloadNow
dsprop
CheckADsError
ErrMsg
FindSheet
ReportError
FindSheet
MsgBox
MsgBox
MsgBox
CheckADsError
ReportError
FindSheet
ErrMsg
ErrMsg
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE