Static task
static1
Behavioral task
behavioral1
Sample
49d53613c63288eee8e9b5466c5e8c8006f90b2dde66c68dd5e36be6d3c2e094.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49d53613c63288eee8e9b5466c5e8c8006f90b2dde66c68dd5e36be6d3c2e094.exe
Resource
win10v2004-20220901-en
General
-
Target
49d53613c63288eee8e9b5466c5e8c8006f90b2dde66c68dd5e36be6d3c2e094
-
Size
482KB
-
MD5
728a3e1205c12d183fdd78f4de261c3b
-
SHA1
72ea0f9f5c991b1c5d9d0b214cf12f021d09ff49
-
SHA256
49d53613c63288eee8e9b5466c5e8c8006f90b2dde66c68dd5e36be6d3c2e094
-
SHA512
2f2a311f3caafc2231b9c6b5f872dbd08fa9d0933b509342a97d6df424bb4826fe117e7d53c47ab6d5d3ce25a7c6b47c04beacde44565dbb6cace26e00206d3d
-
SSDEEP
6144:YcYJkKMhW1mbeEt9nNZD80xBto23yPBzZ5bekgAUeGhkNljNfFmF9q57:YcSFMMIXNfB223O1ZMkhVGhKhNdUQ57
Malware Config
Signatures
Files
-
49d53613c63288eee8e9b5466c5e8c8006f90b2dde66c68dd5e36be6d3c2e094.exe windows x86
ebc07c5269fe0b0fb41d290cd37a0539
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetModuleHandleA
HeapDestroy
GetStdHandle
GetACP
GetEnvironmentVariableA
CloseHandle
DeleteAtom
IsBadCodePtr
TlsGetValue
HeapCreate
GetModuleFileNameA
Sleep
GetStartupInfoA
MapViewOfFile
DeleteFileW
GetCommandLineW
SetEvent
GetFileAttributesA
ReadFile
user32
DrawTextW
GetClassInfoA
DispatchMessageA
FindWindowA
GetWindowLongA
CallWindowProcW
GetKeyState
DestroyMenu
IsZoomed
GetWindowInfo
DispatchMessageA
SetFocus
GetSysColor
DestroyMenu
pnrpnsp
NSPStartup
NSPStartup
NSPStartup
NSPStartup
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ