Static task
static1
Behavioral task
behavioral1
Sample
d48c9886ad030769a2f78cf809e48a19776663cae9623f50e5097ec1ea580052.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d48c9886ad030769a2f78cf809e48a19776663cae9623f50e5097ec1ea580052.exe
Resource
win10v2004-20220812-en
General
-
Target
d48c9886ad030769a2f78cf809e48a19776663cae9623f50e5097ec1ea580052
-
Size
298KB
-
MD5
38ec99d908ea90c6bb1e7923ac3e0cb0
-
SHA1
73eab017744d4f877f6666fe35832155d1ec3393
-
SHA256
d48c9886ad030769a2f78cf809e48a19776663cae9623f50e5097ec1ea580052
-
SHA512
d23b45a5743b6baa974ca9fa41a7f09f1e52293d66839e8fe205a692abda627ab7b4388120f5a046da13d42460d167fc469af5e3bb074409cb4bfefdbc8d1475
-
SSDEEP
6144:aVDoUyV3uv0h1hmjq9X3pWNDd6eluofKHjvhuif/1P+qatYbu:aVYnF9XZBe4OKHjvh7fUB
Malware Config
Signatures
Files
-
d48c9886ad030769a2f78cf809e48a19776663cae9623f50e5097ec1ea580052.exe windows x86
671545083f4bc896d6da1fa135f3526a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
GetFileAttributesA
WriteConsoleA
FindVolumeClose
VirtualProtect
Sleep
WriteConsoleA
GetLogicalDrives
DeleteAtom
lstrcpyA
HeapSize
LoadLibraryW
HeapDestroy
AddAtomA
SetEvent
GetCommandLineA
CopyFileA
GetPrivateProfileSectionW
WriteConsoleA
lstrlenW
GetDriveTypeW
dsprop
ErrMsg
ReportError
CheckADsError
ErrMsg
MsgBox
FindSheet
ReportError
MsgBox
MsgBox
FindSheet
FindSheet
CheckADsError
ErrMsg
mmcndmgr
CreateExecutivePlatform
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 332B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE