Static task
static1
Behavioral task
behavioral1
Sample
49bfcc7fff1af26f98590650c100ec5b667c9dcbc3eca9cc9dbb613f6d113d1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49bfcc7fff1af26f98590650c100ec5b667c9dcbc3eca9cc9dbb613f6d113d1f.exe
Resource
win10v2004-20220812-en
General
-
Target
49bfcc7fff1af26f98590650c100ec5b667c9dcbc3eca9cc9dbb613f6d113d1f
-
Size
29KB
-
MD5
a2f2016dc57034652f5b6883e93eaea0
-
SHA1
f89b90f1b266f619e8f6d5248297f5766eb85759
-
SHA256
49bfcc7fff1af26f98590650c100ec5b667c9dcbc3eca9cc9dbb613f6d113d1f
-
SHA512
7ebd59351f5488aac4cd42254f4cc6751b0b6eb8bd064914ac5c636b9e7826a2d1412d07ef48a05cedc10ce9d0c5c41261b452c4d83da94350f459f491576bca
-
SSDEEP
384:ddyTStdZrow/VlZbn+RHM13vfdHldhwLGEGC+OGa0W/+:dYGtdtFR6M13vfdHldhwyEr+OGa03
Malware Config
Signatures
Files
-
49bfcc7fff1af26f98590650c100ec5b667c9dcbc3eca9cc9dbb613f6d113d1f.exe windows x86
651c3f15c13ce5e90a7fca6b951f3dd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
SizeofResource
VerLanguageNameW
LoadResource
VirtualAlloc
VirtualFree
lstrlenW
GetModuleHandleA
GetCommandLineA
FindResourceA
VerifyVersionInfoA
ExitProcess
user32
EndPaint
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
DispatchMessageA
gdi32
CreateCompatibleDC
DeleteDC
SelectObject
BitBlt
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 910B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ