Static task
static1
Behavioral task
behavioral1
Sample
49c2c53ca79a449ffba7e332357b46398574a8be3b6f8f1bcc39cf22fac84d87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49c2c53ca79a449ffba7e332357b46398574a8be3b6f8f1bcc39cf22fac84d87.exe
Resource
win10v2004-20220812-en
General
-
Target
49c2c53ca79a449ffba7e332357b46398574a8be3b6f8f1bcc39cf22fac84d87
-
Size
317KB
-
MD5
4c195c7925be73887795ef0419139ee0
-
SHA1
14e50b86fca0b82e5d63cfab41036b5c2cda610e
-
SHA256
49c2c53ca79a449ffba7e332357b46398574a8be3b6f8f1bcc39cf22fac84d87
-
SHA512
aaceb349f717f9ebe5fcb5dd3770a32bbef104bdaadbfe4036c1ba9420ca506186be94735554fc74c835c68706af25ea3e402e90ed38b369d95f22fe3c9f7138
-
SSDEEP
6144:ELtOexihqv4m+lXD6betiTuBMTWjIDIiUBAkW9UOKMOtzWO8Catspd:EL1D+IatauBML42MykRao
Malware Config
Signatures
Files
-
49c2c53ca79a449ffba7e332357b46398574a8be3b6f8f1bcc39cf22fac84d87.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 265KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE