Static task
static1
Behavioral task
behavioral1
Sample
54dc75d7f75967707b72fe525609d3107b11e277ded42e03e63be072e75ac6a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54dc75d7f75967707b72fe525609d3107b11e277ded42e03e63be072e75ac6a6.exe
Resource
win10v2004-20220812-en
General
-
Target
54dc75d7f75967707b72fe525609d3107b11e277ded42e03e63be072e75ac6a6
-
Size
725KB
-
MD5
03a38db0a1dc052eb557fa054c782160
-
SHA1
6b8172c11cbc20ae237b3fa6ab5c86f2d997542e
-
SHA256
54dc75d7f75967707b72fe525609d3107b11e277ded42e03e63be072e75ac6a6
-
SHA512
aa919cb188ef22841fc6f997a66d6e351433d5fe5c4c05aaa08a9328dc40149fb7d877f8435852b5a82c048f81d8435f2764f0b8af1d4c636895abb8850649e0
-
SSDEEP
12288:G44Bp4Cj3a+QlW5GQerY23qt+SaZaMiqqk24zAChBZ8vs:EBJj3jIQwY6ZaMXX24zAeBZr
Malware Config
Signatures
Files
-
54dc75d7f75967707b72fe525609d3107b11e277ded42e03e63be072e75ac6a6.exe windows x86
1d449efef5d1e9edfb15e8cec1516aab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
FileEncryptionStatusW
GetInformationCodeAuthzPolicyW
ntdll
ZwCreateJobSet
ZwQueueApcThread
user32
GetCursorInfo
SendMessageCallbackW
GetInputState
oleaut32
VarR8FromR4
kernel32
GetCommandLineW
GetDiskFreeSpaceExW
GetCurrentThread
Sections
.text Size: 716KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE