Static task
static1
Behavioral task
behavioral1
Sample
b54e565f79cd76447fd3c559ffde165d177e3b8fc7c956c181ac2dc1a0780f02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b54e565f79cd76447fd3c559ffde165d177e3b8fc7c956c181ac2dc1a0780f02.exe
Resource
win10v2004-20220812-en
General
-
Target
b54e565f79cd76447fd3c559ffde165d177e3b8fc7c956c181ac2dc1a0780f02
-
Size
101KB
-
MD5
8c675a3bf4727e49f15e512c98a9bc1b
-
SHA1
42a70ca2b014c2af3356b1bc43f5120558cc2eb3
-
SHA256
b54e565f79cd76447fd3c559ffde165d177e3b8fc7c956c181ac2dc1a0780f02
-
SHA512
1f4f9c951b30c34e30e6bcb52595a61a45552ffaeb8fafa99cb625d470dea94b9ae442a5ad338fc3ef118295803129559420a3f0fc05cdfab9f4e42f248b61fe
-
SSDEEP
3072:Ngnin+bYZIZliwcg0yTnDc6H+ely1c6HcT66vlm0wrQVF7i:NCbYZmQwr0WnDc6H9ly1c6HcT66vlmf5
Malware Config
Signatures
Files
-
b54e565f79cd76447fd3c559ffde165d177e3b8fc7c956c181ac2dc1a0780f02.exe windows x86
ae3175854be5831d8503699ab8e4e017
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
CopyFileA
InterlockedIncrement
ReleaseMutex
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
lstrcatA
lstrcpyA
lstrlenA
msvcrt
_write
_fileno
_fstat
_isatty
_lseek
_open
_read
_close
_stat
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_HUGE
_iob
_setmode
__getmainargs
abort
atexit
exit
fclose
fflush
fprintf
fread
free
fseek
fwrite
getc
isspace
isupper
__p__environ
malloc
memchr
memcpy
memmove
memset
signal
strcat
strcmp
strlen
strstr
strtol
strtoul
__set_app_type
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ