Static task
static1
Behavioral task
behavioral1
Sample
0049a80c919a7f9a9378010394d05778fa283638e721f9e934adc07e710e44a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0049a80c919a7f9a9378010394d05778fa283638e721f9e934adc07e710e44a6.exe
Resource
win10v2004-20220901-en
General
-
Target
0049a80c919a7f9a9378010394d05778fa283638e721f9e934adc07e710e44a6
-
Size
45KB
-
MD5
6006fbae4e2497df31ac9764ad6301ae
-
SHA1
1a6fb2cecdf2b69f94c9c808274ad03e0176fca2
-
SHA256
0049a80c919a7f9a9378010394d05778fa283638e721f9e934adc07e710e44a6
-
SHA512
46a80f532d5156b7e1420c386bcac4b7001176b53d1a7f4bb9621f2726ca6847054307962d4bb08555d60bb9e42315caa624ce7157c56ab7fa0bac9c23501b06
-
SSDEEP
768:ywTukTPTBKhmGjam9HczJqoBRV+CsGlsdnBqhmef1hXLssk4fBf0YU7sw8XB:yKNTPmTczJZbXPsdVI1lLh1Ys3
Malware Config
Signatures
Files
-
0049a80c919a7f9a9378010394d05778fa283638e721f9e934adc07e710e44a6.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE