Static task
static1
Behavioral task
behavioral1
Sample
849f0421e0efc8a388ebae8292886f14e3e5073951f3a97d8177d54c3e0390c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
849f0421e0efc8a388ebae8292886f14e3e5073951f3a97d8177d54c3e0390c5.exe
Resource
win10v2004-20220901-en
General
-
Target
849f0421e0efc8a388ebae8292886f14e3e5073951f3a97d8177d54c3e0390c5
-
Size
45KB
-
MD5
007e15c41a4024d1fe1544746cb348c1
-
SHA1
ecf844fc1746699b73440e6a24acfa73adaf7a30
-
SHA256
849f0421e0efc8a388ebae8292886f14e3e5073951f3a97d8177d54c3e0390c5
-
SHA512
2062a7ca74a11985563d1e2ef2d3ebfb372f0f470fb3509aa06e4c9fd365890942e77f7eb87d64ab22b8f00d2164f60296ac9373675f61a6f8036724dba5b753
-
SSDEEP
768:CTVd/b99jhEhVftVEPd/aBB8riAvjWBj5CEKR/tcmhKORaPuhEmm:Ebz9nEhVfTEpaBBVRA/tlhVDC
Malware Config
Signatures
Files
-
849f0421e0efc8a388ebae8292886f14e3e5073951f3a97d8177d54c3e0390c5.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE