Static task
static1
Behavioral task
behavioral1
Sample
54b8844848d12fe1f3a3070260427008073622d6d893d39cb9df0e8a3660b61a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54b8844848d12fe1f3a3070260427008073622d6d893d39cb9df0e8a3660b61a.exe
Resource
win10v2004-20220812-en
General
-
Target
54b8844848d12fe1f3a3070260427008073622d6d893d39cb9df0e8a3660b61a
-
Size
297KB
-
MD5
6295da6c6035c9f9fb96004fa41b7a97
-
SHA1
da6a097a37adbd5bc35750fc325fa7c1739906b5
-
SHA256
54b8844848d12fe1f3a3070260427008073622d6d893d39cb9df0e8a3660b61a
-
SHA512
94d4f9a5215c0d0308a23d008ee7e8daab7f7399c56233cdf5749fb44ec86008685c4720af9d06c52efe7cf8c40c44001b71489476c478ba5b88a7532fa5867c
-
SSDEEP
6144:wEz9BYRsqqMY6MwDXK92xXDH/yGiBTktpcok0ro8fEMgTF:tz9Bcs96Ml92xWB0BEMq
Malware Config
Signatures
Files
-
54b8844848d12fe1f3a3070260427008073622d6d893d39cb9df0e8a3660b61a.exe windows x86
504fb655f8ea898dbcb100fa7a9776d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_CItanh
memcpy
strlen
kernel32
GetModuleHandleA
HeapCreate
LoadLibraryA
HeapDestroy
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
InitializeCriticalSection
WriteFile
HeapFree
SetFilePointer
HeapReAlloc
HeapAlloc
user32
MessageBoxA
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
comdlg32
ChooseColorA
comctl32
InitCommonControlsEx
ole32
CoInitialize
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ