Static task
static1
Behavioral task
behavioral1
Sample
49dac9392792bdfd0b86cb7165cbdbeaaf21412da57b2181cb43c6d9d3eda3a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49dac9392792bdfd0b86cb7165cbdbeaaf21412da57b2181cb43c6d9d3eda3a0.exe
Resource
win10v2004-20220812-en
General
-
Target
49dac9392792bdfd0b86cb7165cbdbeaaf21412da57b2181cb43c6d9d3eda3a0
-
Size
192KB
-
MD5
0e4c40b326d6335259bde840c1874493
-
SHA1
ba3e45f3759cb1e1e3e5ad4eadede0fddc215f15
-
SHA256
49dac9392792bdfd0b86cb7165cbdbeaaf21412da57b2181cb43c6d9d3eda3a0
-
SHA512
664f1424b2cf58b2fb228e70d948513d164a605a89bdc853b8a0605922cd2687ddfbf191c9aeb83a595678a98714af8657c930e91df2afcda5411cea67397b08
-
SSDEEP
768:TBPrlpr5IenhRHycITlAI1hGqrIfxQHp6++gL4h9AlpppppplfiZ+R4Ror9+FuPV:lR3I8fy9TlHbjHoBhC6owFuPNEuT
Malware Config
Signatures
Files
-
49dac9392792bdfd0b86cb7165cbdbeaaf21412da57b2181cb43c6d9d3eda3a0.exe windows x86
389e156c504a58df350db1539c3a9c49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
HeapCreate
GetEnvironmentVariableA
GetModuleHandleA
MapViewOfFile
GetCommandLineA
GetFileAttributesA
FindAtomA
CloseHandle
DeleteAtom
IsBadCodePtr
GetStartupInfoA
HeapDestroy
GetStdHandle
CreateFileA
TlsGetValue
GetCommandLineA
GetPriorityClass
GetModuleFileNameA
ReadFile
user32
DrawTextW
CallWindowProcW
GetSysColor
DispatchMessageA
IsZoomed
DispatchMessageA
SetFocus
GetKeyState
GetWindowInfo
FindWindowA
GetClassInfoA
GetWindowLongA
DestroyMenu
DestroyMenu
ntlanman
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kkohnza Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE