Static task
static1
Behavioral task
behavioral1
Sample
b54122addef45b986ad554fa4532482317b7da223aad8c0193b89818d7888678.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b54122addef45b986ad554fa4532482317b7da223aad8c0193b89818d7888678.exe
Resource
win10v2004-20220812-en
General
-
Target
b54122addef45b986ad554fa4532482317b7da223aad8c0193b89818d7888678
-
Size
72KB
-
MD5
5e70f37909534612845c734c10c43a50
-
SHA1
4bbdda0bd0a30855d34b5fcbaa4132c8b3ef930e
-
SHA256
b54122addef45b986ad554fa4532482317b7da223aad8c0193b89818d7888678
-
SHA512
422bca7be15dd88278672cdc94c31ec13264277a4f1961c5b545cfe93d3ed9647e5562f321491fb402b7a01406aff1a707422c208e7f9f7132594da5bef115a5
-
SSDEEP
1536:l29BMr6WrBaTkQkAFIB6eRZvuP5OnFQAL1lCIx4JL3:l29PW4TOA8puxOnFH5lCNB
Malware Config
Signatures
Files
-
b54122addef45b986ad554fa4532482317b7da223aad8c0193b89818d7888678.exe windows x86
dcbe52b15f8ce573a67960f7c654f681
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LeaveCriticalSection
FormatMessageA
GetStartupInfoW
SetFileAttributesA
CreateMutexA
CloseHandle
GetCurrentDirectoryW
lstrcpyA
ReadConsoleA
IsBadStringPtrW
GetModuleHandleA
InitializeCriticalSection
HeapCreate
GetLastError
lstrcatA
ReadConsoleA
GetLocalTime
ReadFile
ReadConsoleA
FindResourceA
GetFileSize
msi
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseHandle
MsiCloseAllHandles
user32
DispatchMessageA
wsprintfW
GetWindowLongW
IsCharLowerA
IsWindow
IsZoomed
SetCursorPos
PeekMessageW
LoadCursorW
SetFocus
IsDialogMessageA
PostMessageW
GetWindowTextA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text1 Size: 1024B - Virtual size: 241B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE