Static task
static1
Behavioral task
behavioral1
Sample
f554d4ccae347daaafaad3a15bf3a5b156748122d148732d254987d5721eeab0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f554d4ccae347daaafaad3a15bf3a5b156748122d148732d254987d5721eeab0.exe
Resource
win10v2004-20221111-en
General
-
Target
f554d4ccae347daaafaad3a15bf3a5b156748122d148732d254987d5721eeab0
-
Size
239KB
-
MD5
52a812612c045c53d86b6c7198846639
-
SHA1
a3399731d5bdc89f4179b04516a5d48652c2be2d
-
SHA256
f554d4ccae347daaafaad3a15bf3a5b156748122d148732d254987d5721eeab0
-
SHA512
e558083c8e9d8ce3798efa364e7fc78e17a8e10960e903aeed146510b6b85c6874e4c2e4d1ee32ca333fca01918d8fcdbc0a6624f93ff8f117de8b66867459ca
-
SSDEEP
6144:qt5K14o/r+O7+1RKXrHJk5UXkalaqq8+8gXD:KK/S/2XrHJmR8y
Malware Config
Signatures
Files
-
f554d4ccae347daaafaad3a15bf3a5b156748122d148732d254987d5721eeab0.exe windows x86
4347914f9f4178f0660e76095b5a87af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetTapeStatus
ClearCommBreak
CloseHandle
GetStdHandle
GetCommState
FindAtomA
CreateHardLinkA
GetOEMCP
GetProcessHeap
FormatMessageA
DeleteAtom
ExitThread
ReadProcessMemory
GlobalLock
LoadLibraryExA
GlobalCompact
GlobalFlags
GlobalFree
GetProfileStringA
VirtualAlloc
user32
CloseWindow
GetDC
GetWindow
GetClassNameA
GetParent
ShowWindow
ValidateRect
GetActiveWindow
GetWindowTextA
BeginPaint
GetFocus
GetWindowTextLengthA
DrawEdge
EndPaint
GetForegroundWindow
ReleaseDC
IsIconic
RegisterClassA
GetClassInfoExA
wsock32
WSAIsBlocking
WSAGetLastError
WSACleanup
WSAAsyncSelect
WSAStartup
dot3api
Dot3SetProfile
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ