Static task
static1
Behavioral task
behavioral1
Sample
53e258eea15bf488b0df2dd5593896a7df4e79e9038f940d1524787fa1119b97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53e258eea15bf488b0df2dd5593896a7df4e79e9038f940d1524787fa1119b97.exe
Resource
win10v2004-20220812-en
General
-
Target
53e258eea15bf488b0df2dd5593896a7df4e79e9038f940d1524787fa1119b97
-
Size
342KB
-
MD5
a6f299ecbff8f9ab23bcaaedd38f78f4
-
SHA1
5e478119eb48bacdbf54fd9d64dbb8f3341c2071
-
SHA256
53e258eea15bf488b0df2dd5593896a7df4e79e9038f940d1524787fa1119b97
-
SHA512
71cea968d7f8099cf5f020b71086cd0e0650263780b1c8b09bbd8b874c32d76b268aebe93e007589bc8ec93a355cc511b87230d92d600323ddaca4e346618e35
-
SSDEEP
6144:WLtILcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/T3/MIQS:DFhgh2R8O+yFqpLh+7MrS
Malware Config
Signatures
Files
-
53e258eea15bf488b0df2dd5593896a7df4e79e9038f940d1524787fa1119b97.exe windows x86
0d55f5890a839c0c4a924505581712bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetLastError
lstrlenA
GetModuleHandleA
FindClose
CreateWaitableTimerA
GetStdHandle
GetConsoleCP
FreeEnvironmentStringsA
GetACP
CreateFileMappingA
IsBadReadPtr
CreateFileA
CloseHandle
HeapCreate
LoadLibraryExA
GlobalLock
CreateEventA
GlobalUnlock
LocalFree
user32
GetParent
GetSubMenu
DialogBoxParamA
DispatchMessageA
ClipCursor
RedrawWindow
IsMenu
EndDialog
GetDlgItemTextA
GetDlgItem
CheckMenuItem
SetFocus
GetMessageA
DrawIconEx
apphelp
SdbCloseDatabase
ApphelpShowDialog
ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ