Static task
static1
Behavioral task
behavioral1
Sample
749bc922631eaf5e09b945831f909ac78f539bfdeba19a1c768b681b2dbdb6b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
749bc922631eaf5e09b945831f909ac78f539bfdeba19a1c768b681b2dbdb6b9.exe
Resource
win10v2004-20221111-en
General
-
Target
749bc922631eaf5e09b945831f909ac78f539bfdeba19a1c768b681b2dbdb6b9
-
Size
92KB
-
MD5
43f7f6c1f87a518b117637be92d6e827
-
SHA1
ba24134d7afafb65187fae9e668b7bcb91a0f16e
-
SHA256
749bc922631eaf5e09b945831f909ac78f539bfdeba19a1c768b681b2dbdb6b9
-
SHA512
64463e404186b6e4f6e6e30b1a9064d97fac3d64f6e8b269e01d71a709dc8e0de893d1a492812577d9edab77dbf0b57873266a6dd05e39de561a8353dc639fd2
-
SSDEEP
1536:tcTQ1fddoH4GvA2JKReI56E6RfWBzCG7/hj4oIy79owM:tcTQ1fS4GXKr5kZACW/VIyJowM
Malware Config
Signatures
Files
-
749bc922631eaf5e09b945831f909ac78f539bfdeba19a1c768b681b2dbdb6b9.exe windows x86
82e91b32d2ebd96c7c7aef380e20c9df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
DeleteFileA
ExitProcess
CompareStringW
CompareStringA
GetLastError
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetDriveTypeA
GetCommandLineA
GetVersion
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
FlushFileBuffers
WriteFile
GetFullPathNameA
GetCurrentDirectoryA
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapSize
ReadFile
GetProcAddress
GetModuleHandleA
CloseHandle
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
LoadLibraryA
SetEndOfFile
SetEnvironmentVariableA
shell32
ShellExecuteA
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE