Static task
static1
Behavioral task
behavioral1
Sample
f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe
Resource
win10v2004-20220901-en
General
-
Target
f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa
-
Size
440KB
-
MD5
6c8c79f82880de0d8749cf72d9db6df0
-
SHA1
7b8eef4ef411ac0bc098875e020a94fa2cf2a626
-
SHA256
f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa
-
SHA512
3cb1ffab22dfc8c494b87eee19a44d287854a024dbbdfc88d397f553f471b2e027f05e7d38b30f00655f2d71eb08c40f146ba1aaef5d5c540ef8364b337d55ab
-
SSDEEP
12288:HDuOVfDM/w+XWtCWzdw8syqyDp8L25PXbxQng8teF:jBaWCWhDGK5tQg7
Malware Config
Signatures
Files
-
f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe windows x86
b4fb54e81fdc12bc5062b3f46976902f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
ExitProcess
user32
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA
advapi32
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegEnumKeyA
RegCloseKey
Sections
.text Size: 422KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ