Static task
static1
Behavioral task
behavioral1
Sample
49e837d3099a359aa2f8bcd10746b19dbd4629774d82482170e8edf1c8c77331.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
49e837d3099a359aa2f8bcd10746b19dbd4629774d82482170e8edf1c8c77331.exe
Resource
win10v2004-20221111-en
General
-
Target
49e837d3099a359aa2f8bcd10746b19dbd4629774d82482170e8edf1c8c77331
-
Size
210KB
-
MD5
02a2904d7a33106b75c9e8ef1d0c11f0
-
SHA1
812991f2577c8fb98aad1e93e64da9387121679b
-
SHA256
49e837d3099a359aa2f8bcd10746b19dbd4629774d82482170e8edf1c8c77331
-
SHA512
8a66cf327ca65a3aeaf7916250692ff97c75b835ee6afa26bbf6225e5499ade1d935afd1f56b53cd450df9a9389e6dbf364769007dd1eb5ed7c50022d6ed5187
-
SSDEEP
6144:U9NSXX5YxY2dPET2ndZL/bf+a8VG8MCuB/Kh12P34:U9o5aYqPETqdZ7+tMlBc1W34
Malware Config
Signatures
Files
-
49e837d3099a359aa2f8bcd10746b19dbd4629774d82482170e8edf1c8c77331.exe windows x86
2f47f1f30ce8788e3f60f402ebf5a5e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
floor
ceil
strlen
realloc
__p__iob
free
_fileno
_setmode
malloc
calloc
fread
ferror
fseek
ftell
_fstat
feof
fclose
fopen
qsort
memmove
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
HeapReAlloc
TlsSetValue
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..aer Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ