Static task
static1
Behavioral task
behavioral1
Sample
449f6e0b5e067069c903e1a20741e47bf7429bea79e931fd1d46b0ac89e7ba87.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
449f6e0b5e067069c903e1a20741e47bf7429bea79e931fd1d46b0ac89e7ba87.exe
Resource
win10v2004-20220812-en
General
-
Target
449f6e0b5e067069c903e1a20741e47bf7429bea79e931fd1d46b0ac89e7ba87
-
Size
144KB
-
MD5
259ab7001d77e81ccd9f8937501ea420
-
SHA1
3e968378499404252c415405108262458149bfc9
-
SHA256
449f6e0b5e067069c903e1a20741e47bf7429bea79e931fd1d46b0ac89e7ba87
-
SHA512
5f7f6eb60b4918ddc04fdd649e8b6f0b97766717ac489a842d534f8e34c51f0b5b22549e22c3d124504d223617e0116d54058399a9d976b3f770337c24937ece
-
SSDEEP
3072:dIMVZT5GqVXivZuSgkUYKNhsCK8k9t3ywG3RY1W9V7YlNe5:dIMVhEd9gkILsChk95yvhO+Yl4
Malware Config
Signatures
Files
-
449f6e0b5e067069c903e1a20741e47bf7429bea79e931fd1d46b0ac89e7ba87.exe windows x86
9eadb38f691a0b93dce1ca2ec6b7fa7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetTempPathA
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
GetACP
user32
LoadAcceleratorsA
RegisterClassA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ