Static task
static1
Behavioral task
behavioral1
Sample
49f6f271314c8717146143b5ebb601f0e388c77209da910cef90febead44b036.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49f6f271314c8717146143b5ebb601f0e388c77209da910cef90febead44b036.exe
Resource
win10v2004-20220812-en
General
-
Target
49f6f271314c8717146143b5ebb601f0e388c77209da910cef90febead44b036
-
Size
752KB
-
MD5
63f2b34d81eb1bee71ac8cc50717e475
-
SHA1
ae80cd2261acd237fde7180af381bf06d1674924
-
SHA256
49f6f271314c8717146143b5ebb601f0e388c77209da910cef90febead44b036
-
SHA512
2caef99dac0c6efd7ae98d0f895e49b0d99f74cb18e0d9e647977083e4c4ad1caf2740d0d30487df005e5429afb6b04afe36141d1c9d948656b54aa185a1d401
-
SSDEEP
12288:/dMR34C1mVlvdmDEhOCqfoyWqbRJJ/e/IEG4WIoNVLbqdA0FAo2:Qr1mVlvdmg59AJJaIdK+bqvR
Malware Config
Signatures
Files
-
49f6f271314c8717146143b5ebb601f0e388c77209da910cef90febead44b036.exe windows x86
9a0ffe2cc71184983bbf87b9a45463cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetStartupInfoA
GetCommandLineW
CloseHandle
WriteConsoleA
lstrlenW
FindResourceExA
CreateSemaphoreW
HeapCreate
CloseHandle
GetVersion
GetEnvironmentVariableW
FindClose
SuspendThread
HeapDestroy
OpenEventA
ReleaseMutex
SetEvent
GetModuleHandleA
DeleteFileA
user32
DispatchMessageA
GetSysColor
IsZoomed
GetKeyState
CreateIcon
PeekMessageA
SetFocus
CallWindowProcW
DispatchMessageA
GetClassInfoA
FindWindowA
GetWindowLongA
DrawTextW
docprop
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ