Static task
static1
Behavioral task
behavioral1
Sample
54b75a230afe2d4c5fbed19d26c80b76f484018844975d02b1f8e4c174c2782d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54b75a230afe2d4c5fbed19d26c80b76f484018844975d02b1f8e4c174c2782d.exe
Resource
win10v2004-20220812-en
General
-
Target
54b75a230afe2d4c5fbed19d26c80b76f484018844975d02b1f8e4c174c2782d
-
Size
112KB
-
MD5
05788d2d65fdf9c5bde4c1dabaebbbf1
-
SHA1
649f68c64d9ecad42a6620606daafe99de0f399a
-
SHA256
54b75a230afe2d4c5fbed19d26c80b76f484018844975d02b1f8e4c174c2782d
-
SHA512
d94298e23acf063153d4dc4e4aea8c3010a080f56aee36f7cc655c728ae9a96396fc2ec48227c0413cdc3e57bf73b3b7153e54292f0ca388fabbc7e1aa8f9cc3
-
SSDEEP
1536:PWNqqO5vtVJ5OrlFki+QRJ+ZF/KPqYzoAyA4wGn0E2gjERCFO:HXFVJ+Fki7uBKCYzoVf70wF
Malware Config
Signatures
Files
-
54b75a230afe2d4c5fbed19d26c80b76f484018844975d02b1f8e4c174c2782d.exe windows x86
e532db1de3c4e4f0734a66fa35fc006d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GlobalFindAtomW
GetWindowsDirectoryA
GetModuleHandleA
DeleteFileA
GetTickCount
GetCurrentProcess
DeleteFileW
GetCurrentThread
QueryPerformanceCounter
GetOEMCP
GetCurrentThreadId
RemoveDirectoryA
lstrlenA
lstrlenW
IsDebuggerPresent
GetVersion
GetProcessHeap
MulDiv
lstrcmpiW
GetThreadLocale
GetConsoleOutputCP
CopyFileA
GetCurrentProcessId
GetACP
GetCommandLineW
SetCurrentDirectoryA
lstrcmpA
GetModuleHandleW
RemoveDirectoryW
GetUserDefaultLangID
lstrcmpiA
GetCommandLineA
GetStartupInfoA
GlobalFindAtomA
VirtualAlloc
VirtualFree
gdi32
DeleteObject
SelectObject
DeleteDC
GetStockObject
CreateSolidBrush
SetMapMode
CreatePen
CreatePalette
SetTextColor
GetDeviceCaps
GetClipBox
SetTextAlign
CreateCompatibleDC
GetObjectA
RectVisible
SaveDC
GetPixel
RestoreDC
CreateFontIndirectA
PatBlt
GetTextMetricsA
SelectPalette
SetStretchBltMode
SetPixel
LineTo
user32
GetDesktopWindow
CharNextA
TranslateMessage
GetParent
GetSystemMetrics
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE