Static task
static1
Behavioral task
behavioral1
Sample
54beb1118c96f2c45089cec172e30502d24e693eb7b1da0e8f778b21b607761d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54beb1118c96f2c45089cec172e30502d24e693eb7b1da0e8f778b21b607761d.exe
Resource
win10v2004-20220812-en
General
-
Target
54beb1118c96f2c45089cec172e30502d24e693eb7b1da0e8f778b21b607761d
-
Size
232KB
-
MD5
2654cdafe6c8bf80c0b2641ed0ac33bf
-
SHA1
8d1b2bb02f5cb1dd683429441fbe117164ab4ba9
-
SHA256
54beb1118c96f2c45089cec172e30502d24e693eb7b1da0e8f778b21b607761d
-
SHA512
b670ac8ab22c3b9ba20ddd0da132ac5f2862c67bd1da240990cd4a08529beca8fe00332ec6897e94ee7f0b85f3c081aa6d832ab1372ff9aa3549810e93752ec4
-
SSDEEP
6144:4sayLUe3BNVT3QTwAfZYImvclMEEEEEEErGWEEEE7FP:Lay3qgclHp
Malware Config
Signatures
Files
-
54beb1118c96f2c45089cec172e30502d24e693eb7b1da0e8f778b21b607761d.exe windows x86
4d5bd7e9b8095fee6673ed854c0b41e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
GetCurrentDirectoryW
GetProcAddress
VirtualAlloc
OpenEventW
Sleep
LoadLibraryA
MulDiv
GetACP
GetFullPathNameW
GetModuleHandleA
TlsSetValue
GetOEMCP
CreateProcessW
FreeLibrary
user32
GetSystemMetrics
ScrollWindow
CharUpperW
IsZoomed
CreateDialogIndirectParamW
DestroyMenu
InvalidateRect
GetParent
GetWindowLongW
IsWindow
SetCursor
GetMessageA
DefWindowProcW
TranslateMessage
GetMenuItemID
BeginDeferWindowPos
IsIconic
PostQuitMessage
MessageBeep
HideCaret
CreateAcceleratorTableW
SetFocus
DispatchMessageA
gdi32
SetBkMode
CreatePatternBrush
PatBlt
AddFontResourceW
SetBrushOrgEx
ExtTextOutW
GetDeviceCaps
StartDocW
SetWindowOrgEx
GetROP2
SetTextColor
DPtoLP
CreatePen
SelectObject
RestoreDC
comdlg32
ChooseColorW
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW
advapi32
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
IsTextUnicode
RegCreateKeyExW
RegOpenKeyExW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ