Static task
static1
Behavioral task
behavioral1
Sample
49f3ca296e03bd4e8030502b5fadd1421b1768235e7651f79140116725952957.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49f3ca296e03bd4e8030502b5fadd1421b1768235e7651f79140116725952957.exe
Resource
win10v2004-20220812-en
General
-
Target
49f3ca296e03bd4e8030502b5fadd1421b1768235e7651f79140116725952957
-
Size
7KB
-
MD5
83e1c5437c3f45c111bd0a31508426ad
-
SHA1
7c40381cd515daa7597456b879528b5f57e91cd5
-
SHA256
49f3ca296e03bd4e8030502b5fadd1421b1768235e7651f79140116725952957
-
SHA512
ca3ba3d14235542e3fd2871a501281621e728f4e5ac7bd0128ef450f3e3bba323b9287fb7904f31c8ee908bb78791d6539a8259cc60142f6938ca6f0d5d7877c
-
SSDEEP
96:2mDTnH+AzN95Hvp0LhlgqfQEAhAtk7Ckou20rj8jsNTnSC6eCTiPbGTElTkD:2mDTnVPUh5AhAtKrwjeTnSaP6VD
Malware Config
Signatures
Files
-
49f3ca296e03bd4e8030502b5fadd1421b1768235e7651f79140116725952957.exe windows x86
dc5928c0c2a743a29511baba6e0eb019
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
HeapAlloc
GetFileAttributesA
ResetEvent
SetStdHandle
VirtualProtect
GetDateFormatW
CloseHandle
GetStartupInfoA
GetCommandLineW
GetOEMCP
GetModuleHandleA
IsDebuggerPresent
GetLastError
ExitProcess
TlsAlloc
SetConsoleCP
HeapFree
GetEnvironmentStringsW
GetACP
GetFileType
rpcrt4
I_RpcBCacheFree
ole32
CoInitializeEx
msvcrt
_adjust_fdiv
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE