Static task
static1
Behavioral task
behavioral1
Sample
49210820aab87fd29a8d3e0e9483a30afd3897abc2e0c89a3f4dca5ee2e1aacf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49210820aab87fd29a8d3e0e9483a30afd3897abc2e0c89a3f4dca5ee2e1aacf.exe
Resource
win10v2004-20220812-en
General
-
Target
49210820aab87fd29a8d3e0e9483a30afd3897abc2e0c89a3f4dca5ee2e1aacf
-
Size
300KB
-
MD5
0972c30a5ec7b986c8f0aa757d459340
-
SHA1
3bfdd8202fb765d343d616d086d33d86967874d5
-
SHA256
49210820aab87fd29a8d3e0e9483a30afd3897abc2e0c89a3f4dca5ee2e1aacf
-
SHA512
1328cbe4736b7ee5930e11fadbef228ac4cc73aa554b492138dfa5106e0b55443e17d8b539e51a03ab6c7790aa5d4754ad0f3ffb669a31573a8cbf18629c615c
-
SSDEEP
6144:KWWna52HDY5eeck33eJvnhcOq7tVSgmnelN5G+eT:stTecHXcV7tVS9n8N5FeT
Malware Config
Signatures
Files
-
49210820aab87fd29a8d3e0e9483a30afd3897abc2e0c89a3f4dca5ee2e1aacf.exe windows x86
4f8bbdc7d61d0678083927743d2883d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
IsBadWritePtr
CreateDirectoryA
GetLocaleInfoA
RemoveDirectoryA
FindResourceA
FindClose
GetCommandLineA
HeapSize
MapViewOfFile
CreateMailslotW
GetExitCodeThread
GetStdHandle
IsValidCodePage
CancelIo
GetFileAttributesA
SetLastError
GetModuleHandleA
VirtualProtect
GetDriveTypeW
ResetEvent
user32
PeekMessageA
SetCursor
GetWindowLongW
DestroyMenu
LoadCursorA
wsprintfA
IsDialogMessageA
DispatchMessageA
LoadImageW
SetFocus
PostMessageW
GetWindowTextW
GetCapture
ipsmsnap
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ