Static task
static1
Behavioral task
behavioral1
Sample
49f48152a99b44fd637f82a68f6349c09c858b9cb79e4916d0c520d374673701.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49f48152a99b44fd637f82a68f6349c09c858b9cb79e4916d0c520d374673701.exe
Resource
win10v2004-20220901-en
General
-
Target
49f48152a99b44fd637f82a68f6349c09c858b9cb79e4916d0c520d374673701
-
Size
49KB
-
MD5
54bfd57f24ff32f431c36e5dd8956d73
-
SHA1
33310d3efcdd8b5d9e818bd458004061b0b1bdba
-
SHA256
49f48152a99b44fd637f82a68f6349c09c858b9cb79e4916d0c520d374673701
-
SHA512
e180942d5c06f624f90aec2a8303a0840b08188a2019c3b4f225c9d5af6110107c5329482ede846229dee452749996d79bf90fc721761628bda329669dd4cc56
-
SSDEEP
768:I+z7N/FNscZDu81PN7Rc/1XUpnmVpqAa/35KNeu/CeuQkapJWAEm:3z7NTjdRRq1XXnqAO5KLkaWAEm
Malware Config
Signatures
Files
-
49f48152a99b44fd637f82a68f6349c09c858b9cb79e4916d0c520d374673701.exe windows x86
8ad95c215b8bb417d227d6f12c17927c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
IsWindow
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
urlmon
URLDownloadToCacheFileA
wininet
InternetGetConnectedState
ole32
CoCreateInstance
oleaut32
SysAllocString
version
GetFileVersionInfoSizeA
gdi32
GetDeviceCaps
Sections
.text Size: 39KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE