Static task
static1
Behavioral task
behavioral1
Sample
54ac9446313c9e6fb4bf40a6109fdc1cbeb6ad3778e18ae82dde0a5fe336cb67.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54ac9446313c9e6fb4bf40a6109fdc1cbeb6ad3778e18ae82dde0a5fe336cb67.exe
Resource
win10v2004-20220812-en
General
-
Target
54ac9446313c9e6fb4bf40a6109fdc1cbeb6ad3778e18ae82dde0a5fe336cb67
-
Size
819KB
-
MD5
648e59be5cee751ffe0731f3616426a7
-
SHA1
c7f11407eb89dc6c8804c79a680dfd6bf8954abd
-
SHA256
54ac9446313c9e6fb4bf40a6109fdc1cbeb6ad3778e18ae82dde0a5fe336cb67
-
SHA512
510f22859135d41dad612d97987a63608e65c1c9d42eb79e98a4cea5754ebf092d64db7ff29f68bcce17ffd7edc801f729c501cf6ab9af3b4a8c4da049936d3e
-
SSDEEP
24576:YE7f6ePEuTTJL7Rrwk53zodeMCQnHLgXl4kpk:Ykxc6TJL7NhxoYMxn6l4ke
Malware Config
Signatures
Files
-
54ac9446313c9e6fb4bf40a6109fdc1cbeb6ad3778e18ae82dde0a5fe336cb67.exe windows x86
1df532a63cb19d186a59cf9510214031
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
DestroyWindow
TranslateMessage
PostQuitMessage
DefWindowProcA
EnableWindow
GetSystemMetrics
SetCapture
PostMessageA
ReleaseDC
IsWindowEnabled
GetSysColor
GetDC
SendMessageA
InvalidateRect
CreateWindowExA
LoadCursorA
DrawTextA
FillRect
ShowWindow
EndPaint
SetCursor
kernel32
FindClose
FindFirstFileW
HeapFree
EnterCriticalSection
LCMapStringW
LoadResource
GetSystemInfo
GetFileAttributesA
WaitForSingleObject
GetVersionExW
FreeLibrary
GetEnvironmentStringsW
FlushFileBuffers
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
SizeofResource
GetConsoleMode
GetLocaleInfoA
GetFileSize
LockResource
GetCPInfo
HeapSize
GetModuleHandleA
GetVersion
GetCommandLineA
GetCurrentThreadId
GetLastError
GetTickCount
GetCurrentThread
GetCurrentProcessId
ExitProcess
HeapAlloc
GetProcessHeap
SetLastError
VirtualAlloc
InterlockedIncrement
CreateFileA
SetEndOfFile
TlsGetValue
CreateProcessW
HeapCreate
GetModuleHandleW
GetACP
GetFileAttributesW
DeleteFileW
CompareStringA
LoadLibraryW
ReadFile
SetFilePointer
MapViewOfFile
WideCharToMultiByte
RaiseException
SetStdHandle
FindNextFileA
GetProcAddress
Sections
.text Size: 786KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ