Static task
static1
Behavioral task
behavioral1
Sample
849c90cb47201de4f81cda0ad9c550baddfd0de5ead6738e1f0179fd31925d5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
849c90cb47201de4f81cda0ad9c550baddfd0de5ead6738e1f0179fd31925d5e.exe
Resource
win10v2004-20220812-en
General
-
Target
849c90cb47201de4f81cda0ad9c550baddfd0de5ead6738e1f0179fd31925d5e
-
Size
832KB
-
MD5
27140c2754c1744f2cac4d42bcc10391
-
SHA1
09eb2b840442b49619f2b1fcb439de37ebef88bd
-
SHA256
849c90cb47201de4f81cda0ad9c550baddfd0de5ead6738e1f0179fd31925d5e
-
SHA512
1a60a7fc89deb46a0daec1e91e43722a911cfa264f7ef9c09c24bff4f85a5f577fad58007a63816d9563b5e89ff0310bfc6e83c217daea7e26cc69fc69d88f84
-
SSDEEP
24576:ntUEqWIoTer+GuX0DiNUrMnWxcqHOT+hB:tUEqWIAeqGukDiNACEHOT+
Malware Config
Signatures
Files
-
849c90cb47201de4f81cda0ad9c550baddfd0de5ead6738e1f0179fd31925d5e.exe windows x86
25a3a79ba1d12bb957af0162daa15241
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
FreeEnvironmentStringsW
GetDiskFreeSpaceW
CompareStringW
LoadLibraryA
GetEnvironmentStringsW
GetVolumeInformationA
ReadConsoleW
GetTimeFormatA
HeapAlloc
CreateDirectoryA
WriteConsoleA
CopyFileA
GetFileAttributesA
CreateFileMappingA
VirtualAlloc
CopyFileA
msdtcprx
DTC_XaStart
DTC_XaOpen
DTC_XaPrepare
DTC_XaForget
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 813KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ