Static task
static1
Behavioral task
behavioral1
Sample
e020a4dce6c80297972e4d845dc6e3c7506339705b7f7c59a8ab19088971872e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e020a4dce6c80297972e4d845dc6e3c7506339705b7f7c59a8ab19088971872e.exe
Resource
win10v2004-20220812-en
General
-
Target
e020a4dce6c80297972e4d845dc6e3c7506339705b7f7c59a8ab19088971872e
-
Size
239KB
-
MD5
beb08bedf4f2e868284a03bbd1096d2f
-
SHA1
fcb918bd581c293af1ce17835798c4d4a566dae6
-
SHA256
e020a4dce6c80297972e4d845dc6e3c7506339705b7f7c59a8ab19088971872e
-
SHA512
b3aed862915143266c54ce75f4cbbf4b16bdbf598a6763beea3db386d3a8f779eb6dba33d18c65fc30f2bc06984e6745e4d6e44b8e2aa9b6baf7a2295dff64ff
-
SSDEEP
3072:bw87dOyYbAyr0KaUKsh8OL26Rv3kUiAqQXuUoXec+s2Pn4gxUqoqMIQS7FjfkmNJ:p7gyVy0U1iAqEuXuc+LnoO/xB6Jy
Malware Config
Signatures
Files
-
e020a4dce6c80297972e4d845dc6e3c7506339705b7f7c59a8ab19088971872e.exe windows x86
d7764e87c9da2775838507b36f39a276
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleA
FindVolumeClose
DeleteAtom
GetDriveTypeW
Sleep
GetLogicalDrives
WriteConsoleA
LoadLibraryW
GetCommandLineA
VirtualProtect
HeapSize
CopyFileA
GetStartupInfoA
HeapDestroy
lstrcpyA
WriteConsoleA
AddAtomA
GetFileAttributesA
GetPrivateProfileSectionW
SetEvent
lstrlenW
dsprop
FindSheet
ErrMsg
MsgBox
ReportError
CheckADsError
ReportError
MsgBox
ErrMsg
MsgBox
FindSheet
FindSheet
CheckADsError
ErrMsg
mmcndmgr
DllCanUnloadNow
CreateExecutivePlatform
DllGetClassObject
DllRegisterServer
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE