Static task
static1
Behavioral task
behavioral1
Sample
54979e2a243822ea9a3f6fb9fca5a2701dc1e78b440a43b75f17f8fe20dd0a91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54979e2a243822ea9a3f6fb9fca5a2701dc1e78b440a43b75f17f8fe20dd0a91.exe
Resource
win10v2004-20220901-en
General
-
Target
54979e2a243822ea9a3f6fb9fca5a2701dc1e78b440a43b75f17f8fe20dd0a91
-
Size
69KB
-
MD5
38288c594db7b68d1bb78fe7ce6e7be3
-
SHA1
118d499521baef463639345822ac758a9824a5d7
-
SHA256
54979e2a243822ea9a3f6fb9fca5a2701dc1e78b440a43b75f17f8fe20dd0a91
-
SHA512
089c00b1de6203504df5424d62c53bc97ecd5f7cbb03f975c0017dd3e54b5229205c2ad280adaa9e98098b29f414d9378d62c56e6bf911aeaca7a1126026d650
-
SSDEEP
768:pf9WTHPUaLBWGoRRJk0ZHa2WV3gkCUtBQdY8/GOc7wit5zqzsj99sM/9P06C:MJoG0ZHfiy+ydp/gwiLzGSv/9cx
Malware Config
Signatures
Files
-
54979e2a243822ea9a3f6fb9fca5a2701dc1e78b440a43b75f17f8fe20dd0a91.exe windows x86
d85941bd3303c58d095433c11833e8ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetPrivateProfileSectionA
GetPrivateProfileIntA
SetEnvironmentVariableA
GetExitCodeProcess
WaitForSingleObject
lstrcmpA
lstrcpyW
Sleep
Sleep
GetFileAttributesA
VirtualAllocEx
GetModuleHandleW
LoadLibraryA
GetLongPathNameA
WriteFileEx
Sleep
GetDiskFreeSpaceW
GetDiskFreeSpaceW
InterlockedDecrement
FindResourceW
GetPrivateProfileIntA
ExitProcess
apphelp
ApphelpCheckExe
ApphelpCheckIME
AllowPermLayer
SdbCreateMsiTransformFile
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ