Static task
static1
Behavioral task
behavioral1
Sample
49c95fbbbaa16b6834fb155b133b3c196d4e98e97496e1a10fb5190f7e396a59.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
49c95fbbbaa16b6834fb155b133b3c196d4e98e97496e1a10fb5190f7e396a59.exe
Resource
win10v2004-20220812-en
General
-
Target
49c95fbbbaa16b6834fb155b133b3c196d4e98e97496e1a10fb5190f7e396a59
-
Size
16KB
-
MD5
4a16b2b582499aa7dd38f4b1b4da5300
-
SHA1
705bf9a59b370c581d8c334146631fa336da1d1a
-
SHA256
49c95fbbbaa16b6834fb155b133b3c196d4e98e97496e1a10fb5190f7e396a59
-
SHA512
f4a7117685b7bf8074c3463ed83e0129f1515bbbf1df9001a18be1107235e54be343a39f30d80d1159ba4bd2f13e6d589b5edcb95b87452b713c252ded406774
-
SSDEEP
384:VDd2okp6t8TRAKYnKeEM6/A/64Sqkrwo5F83a:f2okpG6TYn+M6/Airzwt3
Malware Config
Signatures
Files
-
49c95fbbbaa16b6834fb155b133b3c196d4e98e97496e1a10fb5190f7e396a59.exe windows x86
27bec5e9bdb09ebc68cd0b208d3cc1ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
WriteProcessMemory
ReadProcessMemory
OpenProcess
GetVersionExA
GetFileAttributesExA
Sleep
WriteFile
CreateFileA
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GetTempPathA
ExitProcess
GetLastError
CreateMutexA
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
MoveWindow
GetWindowRect
GetWindowTextA
FindWindowExA
GetWindowThreadProcessId
SendMessageW
GetSystemMetrics
shell32
ShellExecuteA
wininet
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle
msvcr100
_crt_debugger_hook
_except_handler4_common
_itoa
printf
srand
??2@YAPAXI@Z
??3@YAXPAX@Z
fopen
fread
fclose
memset
strstr
_wcsicmp
rand
memcpy
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ