Static task
static1
Behavioral task
behavioral1
Sample
49244d0100aea8414cec536a3e5687fd0624a9152d71b2b5969ddecec3362602.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
49244d0100aea8414cec536a3e5687fd0624a9152d71b2b5969ddecec3362602.exe
Resource
win10v2004-20221111-en
General
-
Target
49244d0100aea8414cec536a3e5687fd0624a9152d71b2b5969ddecec3362602
-
Size
107KB
-
MD5
25fdf44ce60cc6debc580ec8885e48e0
-
SHA1
c972b03c1b79049ce0b225f792be39911c1f01b8
-
SHA256
49244d0100aea8414cec536a3e5687fd0624a9152d71b2b5969ddecec3362602
-
SHA512
7223c5ed5d5de3ba78e7834e77fdefd69578b563afa0fbb896290b72aabcacca940c31258333c31521fcb0fe3a10d361f0c81568d075b7683724c44a2f082685
-
SSDEEP
1536:W/S6zsEJc5HOid5d+r2yLJ6jyemcfoJfR//o+8cDoU:X6Jid5YrjuJ7oJpaPU
Malware Config
Signatures
Files
-
49244d0100aea8414cec536a3e5687fd0624a9152d71b2b5969ddecec3362602.exe windows x86
df4aff3bed5eefc61b6abdd87e6db7a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
bugrpt
BR_Send
BR_UserInit
BR_SetSvrIP
BR_SetSvrAckHandler
kernel32
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
shell32
CommandLineToArgvW
msvcp80
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr80
__setusermatherr
_adjust_fdiv
__p__commode
_ismbblead
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
_configthreadlocale
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
??3@YAXPAX@Z
_initterm_e
_initterm
_acmdln
__dllonexit
exit
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE