Static task
static1
Behavioral task
behavioral1
Sample
54b7348656891b9688df606e1d0322e38875148360698202dbeceda308000792.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54b7348656891b9688df606e1d0322e38875148360698202dbeceda308000792.exe
Resource
win10v2004-20220812-en
General
-
Target
54b7348656891b9688df606e1d0322e38875148360698202dbeceda308000792
-
Size
119KB
-
MD5
283470c915b0c14469528359d2588550
-
SHA1
5596505c2058078af34ce67d0bc26bc337d96688
-
SHA256
54b7348656891b9688df606e1d0322e38875148360698202dbeceda308000792
-
SHA512
a4c89d3a69291e39d0072d5d58df2eaa2bb9d63840d85a7ac20ba2e59a18c4b45cb5f65fe02be71723f783ef3ff59e061254ca012b4e717c9c1d3ea312d12d8a
-
SSDEEP
1536:HeodjIoZm4dZydoIHj5ALAiZRlSePY+46m7ET96AJGs/BPEe00HbC2hEjS:ZdjIoZJuoyj5APRtmIZ3JGgMSbC84S
Malware Config
Signatures
Files
-
54b7348656891b9688df606e1d0322e38875148360698202dbeceda308000792.exe windows x86
a8ba83904b8e0c4a3e425eca1920aaaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetCommandLineW
GetStartupInfoW
GetCurrentProcess
CloseHandle
WriteFile
CreateFileA
ExitProcess
SetFileAttributesW
Module32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
LocalFree
GetLastError
FindClose
OutputDebugStringA
FindResourceA
LoadResource
SizeofResource
Sleep
GetFileAttributesW
MultiByteToWideChar
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
advapi32
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetSecurityInfo
InitializeAcl
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ