Static task
static1
Behavioral task
behavioral1
Sample
449de5b1ca2e0585b5a6c63c48dbd459c2ecd94223c91c36000063841f8e79a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
449de5b1ca2e0585b5a6c63c48dbd459c2ecd94223c91c36000063841f8e79a8.exe
Resource
win10v2004-20220901-en
General
-
Target
449de5b1ca2e0585b5a6c63c48dbd459c2ecd94223c91c36000063841f8e79a8
-
Size
372KB
-
MD5
600de894125e5cc91f0c774e585e2970
-
SHA1
3f57966ba8791448e284a7f05f4ce3b584a9cd4e
-
SHA256
449de5b1ca2e0585b5a6c63c48dbd459c2ecd94223c91c36000063841f8e79a8
-
SHA512
06d44457ae00fc99e3d893cbcf9ee9c854e4436a4f22a59f16a4daedf972fd3ae9d36e4d7dd9116fa901ca59aadf5299eb4309c8ae86db92958ad52ed58a33b8
-
SSDEEP
6144:EbjueaDDulqGyY/AKXcBXc2c75YNPfbI9DicHSsUQzPtzaADrc:MIiluY4KMJ07+afJdLD
Malware Config
Signatures
Files
-
449de5b1ca2e0585b5a6c63c48dbd459c2ecd94223c91c36000063841f8e79a8.exe windows x86
1b26aa8a222f2cafeb6baeab771615b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
ExitProcess
OpenSemaphoreA
HeapLock
GetModuleHandleA
GetSystemTime
GetLastError
ResetEvent
CreateSemaphoreA
CreateTimerQueue
GetProcAddress
GetCurrentProcess
VirtualProtect
GetCommandLineA
GetSystemDirectoryA
user32
UpdateWindow
LoadIconA
IsIconic
gdi32
DeleteObject
advapi32
CopySid
AddAce
ole32
CoUninitialize
psapi
GetModuleInformation
GetProcessMemoryInfo
msvfw32
ICInfo
avifil32
EditStreamSetNameA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 982B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 766KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ