Static task
static1
Behavioral task
behavioral1
Sample
d54b33854b72c76306c4530499b7754a90593da6d02cbec1a0c3da3119e12b38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d54b33854b72c76306c4530499b7754a90593da6d02cbec1a0c3da3119e12b38.exe
Resource
win10v2004-20220812-en
General
-
Target
d54b33854b72c76306c4530499b7754a90593da6d02cbec1a0c3da3119e12b38
-
Size
311KB
-
MD5
82b81963c2530f5510399f0bc6b46bb5
-
SHA1
fca006c2823569c612db6e5929d6effdb2201116
-
SHA256
d54b33854b72c76306c4530499b7754a90593da6d02cbec1a0c3da3119e12b38
-
SHA512
ae84647290232a98c371b1e17e18480602b257fc1089194d2ff344cb4251d4069bd868d73fe299357dd875f1c86d2f41fd707d9d2e39883a1cd668da64ac733b
-
SSDEEP
6144:BaIU6aNE80qYBQ1y9m5BD4MUuNtFt4cadNajhCKUYgbMRcFns:BaIU6aaqYBQswjMSNdeNchCtY+fFn
Malware Config
Signatures
Files
-
d54b33854b72c76306c4530499b7754a90593da6d02cbec1a0c3da3119e12b38.exe windows x86
032aa3db8dbde7be70d6a84f5c5035ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
GetNumberOfConsoleInputEvents
GlobalSize
GetFileType
GetFileSize
MapViewOfFile
ExitProcess
CreateFileA
ReadFile
Sleep
CloseHandle
CreateFileMappingA
WriteFile
lstrlenA
avifil32
AVIStreamRelease
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIFileGetStream
AVIStreamInfoA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileInit
AVIFileRelease
AVISaveOptions
AVIStreamWrite
gdi32
CombineRgn
FillRgn
GetObjectA
SelectObject
CreateRectRgn
DeleteObject
SetDIBitsToDevice
CreateDIBSection
StretchBlt
GetCurrentObject
DeleteDC
user32
RegisterClassA
ShowWindow
ReleaseCapture
GetKeyState
DefWindowProcA
EnumWindowStationsW
SetFocus
GetClassLongW
SetCapture
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ