Static task
static1
Behavioral task
behavioral1
Sample
54afbcf956b8bf4d3d694b0ae2dc059ffc3e90eada982f2d1583d68e181834aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54afbcf956b8bf4d3d694b0ae2dc059ffc3e90eada982f2d1583d68e181834aa.exe
Resource
win10v2004-20220812-en
General
-
Target
54afbcf956b8bf4d3d694b0ae2dc059ffc3e90eada982f2d1583d68e181834aa
-
Size
328KB
-
MD5
516c8f87aabb8c9f7bb99e1847ee39c0
-
SHA1
efaf3045f1f935879d5e405d52a8d4988094e9c6
-
SHA256
54afbcf956b8bf4d3d694b0ae2dc059ffc3e90eada982f2d1583d68e181834aa
-
SHA512
0eebda1361d7df7617b1416c8fc27d22035a6bd77a19d3f0a44d486623c609124a658b342b61be6e6060874581477d64b6a8a9d91d9dc15313ea50a991fb92ed
-
SSDEEP
6144:CNzIyUp1mPuJnC2gQwRMq22lnOOV9kyN:QIF0QCrQwi2UOwS
Malware Config
Signatures
Files
-
54afbcf956b8bf4d3d694b0ae2dc059ffc3e90eada982f2d1583d68e181834aa.exe windows x86
52e4be57e1235b025c9dd7c06a6c3087
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SearchPathA
GetModuleHandleA
CreateSemaphoreA
GetModuleFileNameA
VirtualProtect
FindClose
Sleep
GetCommandLineA
GetExitCodeProcess
TlsGetValue
GetComputerNameA
CloseHandle
SetLastError
ReleaseMutex
DeleteCriticalSection
FreeConsole
CreateMutexA
GetLastError
GetDriveTypeA
shell32
ShellAboutA
ShellMessageBoxA
SHAlloc
SHGetSettings
SHFree
SHGetDiskFreeSpaceA
DragAcceptFiles
StrChrA
DragQueryFileA
SHGetNewLinkInfo
DragQueryPoint
SheChangeDirA
SHGetMalloc
DragFinish
mgmtapi
SnmpMgrCtl
SnmpMgrGetTrap
SnmpMgrOpen
SnmpMgrClose
SnmpMgrRequest
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ