Static task
static1
Behavioral task
behavioral1
Sample
ad5b55aa8475955624fd2b60cf7b5a16e364024853fda9d6b29d73a9e1df9930.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad5b55aa8475955624fd2b60cf7b5a16e364024853fda9d6b29d73a9e1df9930.exe
Resource
win10v2004-20221111-en
General
-
Target
ad5b55aa8475955624fd2b60cf7b5a16e364024853fda9d6b29d73a9e1df9930
-
Size
207KB
-
MD5
f82694953a670bee20cf25bd1670da2a
-
SHA1
5e48f12a812ab83a0329433eeacaf96a7cb1bed0
-
SHA256
ad5b55aa8475955624fd2b60cf7b5a16e364024853fda9d6b29d73a9e1df9930
-
SHA512
88b28819c17a3cce8d5b9f9c7e4bbd2a547c6ea4b8cfa1341c115d4a4a716d5cdd2e586011ca3ee1fab8d7921cd43703114569fa7e0004d78a97fadcbf601e68
-
SSDEEP
3072:bw87dOyYbAyr0KaUKsh8OL26Rv3kUiAqQXuUoXec+s2Pn4gxUqoqMIQS7Fjfkmy:p7gyVy0U1iAqEuXuc+LnoO/xy
Malware Config
Signatures
Files
-
ad5b55aa8475955624fd2b60cf7b5a16e364024853fda9d6b29d73a9e1df9930.exe windows x86
d7764e87c9da2775838507b36f39a276
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleA
FindVolumeClose
DeleteAtom
GetDriveTypeW
Sleep
GetLogicalDrives
WriteConsoleA
LoadLibraryW
GetCommandLineA
VirtualProtect
HeapSize
CopyFileA
GetStartupInfoA
HeapDestroy
lstrcpyA
WriteConsoleA
AddAtomA
GetFileAttributesA
GetPrivateProfileSectionW
SetEvent
lstrlenW
dsprop
FindSheet
ErrMsg
MsgBox
ReportError
CheckADsError
ReportError
MsgBox
ErrMsg
MsgBox
FindSheet
FindSheet
CheckADsError
ErrMsg
mmcndmgr
DllCanUnloadNow
CreateExecutivePlatform
DllGetClassObject
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE