Static task
static1
Behavioral task
behavioral1
Sample
89e3321cd0bc7f22a236d8db49b0bcad23cbd64ff0f65c0deaa736d09254791a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
89e3321cd0bc7f22a236d8db49b0bcad23cbd64ff0f65c0deaa736d09254791a.exe
Resource
win10v2004-20220812-en
General
-
Target
89e3321cd0bc7f22a236d8db49b0bcad23cbd64ff0f65c0deaa736d09254791a
-
Size
298KB
-
MD5
445ae2ea0999a64c52c9b604700b1bc0
-
SHA1
31e7c6fb7de21d8a1df4b2bb0f4debad0853677d
-
SHA256
89e3321cd0bc7f22a236d8db49b0bcad23cbd64ff0f65c0deaa736d09254791a
-
SHA512
7b9e66bdf021a5d2068f2306de0fd1443a5d794f9567c70d60e53d304e7a7524f22a9035627f5f098cc300884f7c85548b604ef072acf8ce83cd2fc18ae48c45
-
SSDEEP
6144:S+yVyt/V1ivB+R2b8223GbsAEYVYcWSM0izWCruQ04:jt/VJAp2Wbsobizgk
Malware Config
Signatures
Files
-
89e3321cd0bc7f22a236d8db49b0bcad23cbd64ff0f65c0deaa736d09254791a.exe windows x86
855b9edb6f89dc09b7edfde4a09e684b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
LoadLibraryW
GetProcessHeap
AddAtomW
WriteConsoleW
GetFileAttributesA
Sleep
GetCommandLineA
GetPrivateProfileSectionW
GetStartupInfoA
DeleteFileA
WriteConsoleW
HeapDestroy
GetDriveTypeW
WriteConsoleW
CopyFileA
SetEvent
lstrlenW
lstrcpyA
CancelIo
VirtualProtect
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
dsprop
ReportError
CheckADsError
MsgBox
MsgBox
CheckADsError
ErrMsg
FindSheet
ErrMsg
ErrMsg
ReportError
MsgBox
FindSheet
FindSheet
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE