Static task
static1
Behavioral task
behavioral1
Sample
49ee40ae5e559c137a6a023e4498908e8b37a21f76d557360cd7b322a6741950.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49ee40ae5e559c137a6a023e4498908e8b37a21f76d557360cd7b322a6741950.exe
Resource
win10v2004-20220812-en
General
-
Target
49ee40ae5e559c137a6a023e4498908e8b37a21f76d557360cd7b322a6741950
-
Size
89KB
-
MD5
96edf2b1d5469918dfa4e373cfed99e0
-
SHA1
f5f6c1e38ce99a6322e9722aec71c508db348a02
-
SHA256
49ee40ae5e559c137a6a023e4498908e8b37a21f76d557360cd7b322a6741950
-
SHA512
cef5d52fa3f90b42d210a4065c1d728c79d6096c5bbc3441d69895d015c74565920f8dc23c87a694bd1627544c799cbe5e1fe1539b9db5e0777b840863f86916
-
SSDEEP
1536:p6jFpgIzqwl+x7Rd5F90nAjHCHsJh+/kF+yrwrm/7aLd2ec:gj7FfkRX0Sgsr+/m+yMr4aLd2r
Malware Config
Signatures
Files
-
49ee40ae5e559c137a6a023e4498908e8b37a21f76d557360cd7b322a6741950.exe windows x86
d47cc45f94090dc489d406a5b9fa7dfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
mpr
WNetGetUserA
wsock32
WSACleanup
shell32
ShellExecuteA
wininet
InternetReadFile
ws2_32
WSAIoctl
Sections
.text Size: 83KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE