Static task
static1
Behavioral task
behavioral1
Sample
49d2234373e4d7fd617024c3e87904d4e8f98e9b21e92d9e5869514b312c0014.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49d2234373e4d7fd617024c3e87904d4e8f98e9b21e92d9e5869514b312c0014.exe
Resource
win10v2004-20220901-en
General
-
Target
49d2234373e4d7fd617024c3e87904d4e8f98e9b21e92d9e5869514b312c0014
-
Size
320KB
-
MD5
a0193d66e7cf97db5843d21d035f2f60
-
SHA1
92627582f0bf3782198231f60241957fa4a38158
-
SHA256
49d2234373e4d7fd617024c3e87904d4e8f98e9b21e92d9e5869514b312c0014
-
SHA512
3a2698c0e27fbd796d0582e1b5e0ad0a2a2f6d674c00200bd22669a2775cdeabb68ac0f2e8decc084b5a3e3f3400c85c0ca41eaa516ef6dcd37b228003c5ac83
-
SSDEEP
6144:7I3tKgoU8+sH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:72Ka962EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
49d2234373e4d7fd617024c3e87904d4e8f98e9b21e92d9e5869514b312c0014.exe windows x86
94cab842ff70313ae5930cad2bbf9d6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
CreateProcessInternalW
ConvertThreadToFiber
SizeofResource
GetConsoleCommandHistoryW
GetProfileIntW
GetCommModemStatus
LocalAlloc
GetModuleHandleExW
FatalAppExitA
GetConsoleCommandHistoryA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE