Static task
static1
Behavioral task
behavioral1
Sample
54f436d1182a28afe39d7b16c90a9acb14c94050a57d162c35ed87df9d3b2f07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54f436d1182a28afe39d7b16c90a9acb14c94050a57d162c35ed87df9d3b2f07.exe
Resource
win10v2004-20220812-en
General
-
Target
54f436d1182a28afe39d7b16c90a9acb14c94050a57d162c35ed87df9d3b2f07
-
Size
502KB
-
MD5
4921e62c10df0aee3a30c41f3b7381c0
-
SHA1
f5a951283da06112ef98e532de95b484b7deb619
-
SHA256
54f436d1182a28afe39d7b16c90a9acb14c94050a57d162c35ed87df9d3b2f07
-
SHA512
0a8e3b45c440be2303bef592947650e926b637281af4a812fd578a02c8a6314b7983b2c3d9fd0a928db16ea57875cfe876b3f37a7c62045fa3e1fc2c387a8d0f
-
SSDEEP
12288:vRnbB21uZ3IC09QB00+xr9VYwL7n39PPS/4zZZslm:vVu5QB00+jVYw1U4Dsg
Malware Config
Signatures
Files
-
54f436d1182a28afe39d7b16c90a9acb14c94050a57d162c35ed87df9d3b2f07.exe windows x86
5b1097600649dc562acc55eb147748d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetStartupInfoA
GetLogicalDriveStringsW
lstrlenA
FileTimeToLocalFileTime
GetStdHandle
lstrcmpiW
GetVolumePathNameW
lstrcmpiW
Sleep
DeleteFileA
GetCommState
CreateMailslotW
GetModuleHandleA
CreateNamedPipeW
lstrcmpiW
IsValidLocale
SetLastError
GetProcessHeap
GetModuleFileNameA
lstrcmpiW
lstrcmpiW
GetConsoleAliasA
scecli
SceSysPrep
SceOpenPolicy
InitializeChangeNotify
DeltaNotify
Sections
.text Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 495KB - Virtual size: 1024KB
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ