Static task
static1
Behavioral task
behavioral1
Sample
14efc49df4f4c4b1611f50670f843191fd86b350e2a4249cc1e052d1073c04b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
14efc49df4f4c4b1611f50670f843191fd86b350e2a4249cc1e052d1073c04b9.exe
Resource
win10v2004-20220901-en
General
-
Target
14efc49df4f4c4b1611f50670f843191fd86b350e2a4249cc1e052d1073c04b9
-
Size
761KB
-
MD5
a9294f7912e59b64cb4f97c3f0b9beeb
-
SHA1
93f8f9c1ddadf56ad21d402484525fe2a99281cb
-
SHA256
14efc49df4f4c4b1611f50670f843191fd86b350e2a4249cc1e052d1073c04b9
-
SHA512
524023b7f52ffac20aa0e25fa693a4589118ffdbc2fa205f0f7ecf41c583a32293eb34e65d696898c8939fdb4d5a090d74cf6201604f1d18915ea7c1a5ddade2
-
SSDEEP
12288:53eVtpwnKx4mGHJHSd/Dxs33Vuso2DQoyazsfnrfjf+XHnneTrN9KAeloEvBMJZk:vtJG/DxKu5ww/P2uTrNV9wGJZYHDfca
Malware Config
Signatures
Files
-
14efc49df4f4c4b1611f50670f843191fd86b350e2a4249cc1e052d1073c04b9.exe windows x86
4710e694cbc904bbde58b1960e1a3f6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 76KB
.idata Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ