Static task
static1
Behavioral task
behavioral1
Sample
49bc2eba2087d917cdebd9a81ef2faa5711e60e96308377839de90cea6a256d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
49bc2eba2087d917cdebd9a81ef2faa5711e60e96308377839de90cea6a256d7.exe
Resource
win10v2004-20221111-en
General
-
Target
49bc2eba2087d917cdebd9a81ef2faa5711e60e96308377839de90cea6a256d7
-
Size
76KB
-
MD5
f603ec9ed6caab0186b5b52ed2fa3cf6
-
SHA1
5b92b0ac5ca0015efb0f5fe821ff54fed1992ab6
-
SHA256
49bc2eba2087d917cdebd9a81ef2faa5711e60e96308377839de90cea6a256d7
-
SHA512
0a0cd20d6e9d28cc15e45f1b27300ad6091358830f90a6e256c392263578f55756fa4ec3369990fec83ebee97bf1e060455028c82ae302976d5a10bf9ea5e925
-
SSDEEP
1536:8lvylNs0wyYsINEb5htD9xt70hTCyZxuUpjVrs2ryrd1vUQuq6:8lh0rIYnepZxzHs2qo
Malware Config
Signatures
Files
-
49bc2eba2087d917cdebd9a81ef2faa5711e60e96308377839de90cea6a256d7.exe windows x86
6c77cb4fb07c57d565cb277535bbc7f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
lstrcmp
BeginUpdateResourceW
IsDebuggerPresent
LocalReAlloc
FatalExit
IsDebuggerPresent
IsBadStringPtrW
GetTimeFormatA
FreeVirtualBuffer
SetLocaleInfoA
GetAtomNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE