Static task
static1
Behavioral task
behavioral1
Sample
854ecb9f54a0ff6a52f4372d2f6e92e950d78450966fd573bc3e63b78ed5a70a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
854ecb9f54a0ff6a52f4372d2f6e92e950d78450966fd573bc3e63b78ed5a70a.exe
Resource
win10v2004-20220812-en
General
-
Target
854ecb9f54a0ff6a52f4372d2f6e92e950d78450966fd573bc3e63b78ed5a70a
-
Size
12KB
-
MD5
043cf0959de054b7f697ddf0b1b5aece
-
SHA1
b35f102f281dbdfdbd16bb3ae0fcf2ac86a58b73
-
SHA256
854ecb9f54a0ff6a52f4372d2f6e92e950d78450966fd573bc3e63b78ed5a70a
-
SHA512
a69cd4f92c4a65ed7e6c3a8002e17b3304687d4d7ecb5304a20297bfb6dff7bdaa7a677522ef073e73e0c236c6d04eaa373b9e70601308b15de63e77409f5b73
-
SSDEEP
192:gigGoYMp6EK0imp3dI+SNyelGWbpWtTjyooJppSQsDaM/OyK:gaZHmp3eXyeAWbpW0oobpSQzURK
Malware Config
Signatures
Files
-
854ecb9f54a0ff6a52f4372d2f6e92e950d78450966fd573bc3e63b78ed5a70a.exe windows x86
9deea3c6b0ddb4635e5508f30c1b315d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
kernel32
GetVersionExA
GetACP
GetProcAddress
GetModuleHandleA
CloseHandle
ExitProcess
GetCommandLineA
GetStartupInfoA
ResetEvent
lstrcmpiA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
CreateEventA
LocalFree
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
user32
EnumWindows
GetClassNameA
FindWindowA
SetWindowPos
PostMessageA
KillTimer
PeekMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
SetTimer
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
GetSystemMetrics
msctf
TF_UninitSystem
TF_CreateCicLoadMutex
TF_InvalidAssemblyListCache
TF_PostAllThreadMsg
TF_InitSystem
msutb
ClosePopupTipbar
GetPopupTipbar
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ