Static task
static1
Behavioral task
behavioral1
Sample
49fc897408962b2b5fb6e70e6c6e8757d91a2fa23aa7714b8025943f83637563.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49fc897408962b2b5fb6e70e6c6e8757d91a2fa23aa7714b8025943f83637563.exe
Resource
win10v2004-20220812-en
General
-
Target
49fc897408962b2b5fb6e70e6c6e8757d91a2fa23aa7714b8025943f83637563
-
Size
296KB
-
MD5
4e516412941320a83e67b574b0b1d54d
-
SHA1
72c3d385ffc3e4524db154438025ee62f1b155af
-
SHA256
49fc897408962b2b5fb6e70e6c6e8757d91a2fa23aa7714b8025943f83637563
-
SHA512
6d62b5b61c52287087a9a02b589e3cbf1d6a60425e2ce39349427ff4c2b2c4a280fb69c980c6afb679ba236ea96301554dcb6f4f61cad23de07984a9d7672d68
-
SSDEEP
6144:xR2S47mBU3z/J3HI5hwC1ZEAjHAA2uKD3EpTo4sN:T237eUD9I50oH0DD0gN
Malware Config
Signatures
Files
-
49fc897408962b2b5fb6e70e6c6e8757d91a2fa23aa7714b8025943f83637563.exe windows x86
d9035f7f7b589f6a5b3fa10c446cb5de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
LocalAlloc
CreateFileMappingW
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ