Static task
static1
Behavioral task
behavioral1
Sample
e54ba5b5d73c3c7abc8ebe2bef09d7867ca6d5c518fe7d0c44c8468322c8bc4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e54ba5b5d73c3c7abc8ebe2bef09d7867ca6d5c518fe7d0c44c8468322c8bc4d.exe
Resource
win10v2004-20220812-en
General
-
Target
e54ba5b5d73c3c7abc8ebe2bef09d7867ca6d5c518fe7d0c44c8468322c8bc4d
-
Size
70KB
-
MD5
a2a767f5542e59cd02ceb92d526900d3
-
SHA1
c2c9bc24e5ff55efd82efede52ae286addb8a877
-
SHA256
e54ba5b5d73c3c7abc8ebe2bef09d7867ca6d5c518fe7d0c44c8468322c8bc4d
-
SHA512
623be2b2ab48e63ce70b906b92b250ea972950ff29b7c3ea4259dc9e9d92d785813d835ffdf700bd6d19b346f588078566494bae5e2c4a0cecc58570dc05eda9
-
SSDEEP
768:B34/5vQHM+ufKOThjaJ0lxeli77ra1SKGIsN2GBMei3wliGMO5Cf4LI:CxvN+U8qWY73IsN2GBMJ3wliK5
Malware Config
Signatures
Files
-
e54ba5b5d73c3c7abc8ebe2bef09d7867ca6d5c518fe7d0c44c8468322c8bc4d.exe windows x86
48567d54214050e0bb0ddebc30bedb27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
VirtualProtect
CreateFileW
SuspendThread
SetEvent
LeaveCriticalSection
IsValidLocale
GetFileAttributesW
AddAtomW
ResumeThread
CreateMutexA
GetLocaleInfoA
InterlockedExchange
SetFilePointer
CreateFileW
GetCurrentThreadId
LocalFlags
lstrlenA
OpenEventW
GetVersionExA
GetTickCount
HeapDestroy
GetModuleFileNameA
CreateDirectoryA
GetModuleHandleA
user32
DispatchMessageA
DestroyIcon
IsMenu
wsprintfA
GetWindowLongA
SetRect
MessageBoxA
PeekMessageA
IsMenu
GetWindowLongA
DestroyMenu
LoadCursorA
GetWindowTextA
dplayx
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE