Static task
static1
Behavioral task
behavioral1
Sample
b54988f923901a19f9ff075244f3be8c7889c67b379ca781d686cd2d8a212ecb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b54988f923901a19f9ff075244f3be8c7889c67b379ca781d686cd2d8a212ecb.exe
Resource
win10v2004-20221111-en
General
-
Target
b54988f923901a19f9ff075244f3be8c7889c67b379ca781d686cd2d8a212ecb
-
Size
297KB
-
MD5
9d18fcf1c0616b93f8f6190e875175c5
-
SHA1
104c3d76ea7f88a2def7f8e69bb5fc636849d0d0
-
SHA256
b54988f923901a19f9ff075244f3be8c7889c67b379ca781d686cd2d8a212ecb
-
SHA512
2732a20ecde4371d0aa522dcdcd919b9f8736a2c78fc750bf30895968ad7de8779444b3a7f0f24ffba3803f7f01e88b706c57dd4b387c4395c71d1ca212e9685
-
SSDEEP
6144:abiHpRF+qABAz1GMmjVqkwIIBACFaH6dwe1oU0aj1rJ0M9i:uiHYqEAsrjok7CW6Igj1rJ0M9i
Malware Config
Signatures
Files
-
b54988f923901a19f9ff075244f3be8c7889c67b379ca781d686cd2d8a212ecb.exe windows x86
ab14d60c31c068ed2bf08211af46c892
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetLastError
GetExitCodeProcess
lstrcmpA
SetEnvironmentVariableA
GetCurrentDirectoryA
Sleep
ReadFileEx
lstrcpyW
FindResourceW
InterlockedDecrement
GetPrivateProfileIntA
GetStringTypeW
GetModuleHandleW
InterlockedIncrement
Heap32First
GetDiskFreeSpaceW
WaitForSingleObject
LoadLibraryA
VirtualAlloc
GetDiskFreeSpaceW
apphelp
ApphelpCheckExe
ApphelpCheckIME
AllowPermLayer
SdbCreateMsiTransformFile
clbcatq
SetSetupSave
SetSetupSave
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetupOpen
DllGetClassObject
SetupOpen
SetupOpen
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE