Static task
static1
Behavioral task
behavioral1
Sample
149c3b292805a71e9606c0a3b6deb35929bbeb46dd0c75cc84017d0711a34448.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
149c3b292805a71e9606c0a3b6deb35929bbeb46dd0c75cc84017d0711a34448.exe
Resource
win10v2004-20220901-en
General
-
Target
149c3b292805a71e9606c0a3b6deb35929bbeb46dd0c75cc84017d0711a34448
-
Size
22KB
-
MD5
594a898ed2833c406f7323d26f7bc370
-
SHA1
34c19166a22f357029fcd03ab2fdfd409e6ddbcd
-
SHA256
149c3b292805a71e9606c0a3b6deb35929bbeb46dd0c75cc84017d0711a34448
-
SHA512
68ee098dc77ac3c755eccadecb24cb4886d0a769458abbf30aded86a1d7e41e8cc264ac4d7fb25626d66c548f11b26e602ebb2434409bb71f868cc4f442605d5
-
SSDEEP
192:9Gt3j5XVLkbqAXG/YUudf2aNw7RO5w8pfRIs6op0bVlPoHscbijeofFsUjsUbBya:gtllLk+XdO5w8pfNcVUbiSodfbwVTo
Malware Config
Signatures
Files
-
149c3b292805a71e9606c0a3b6deb35929bbeb46dd0c75cc84017d0711a34448.exe windows x86
a3f3ef898542a6a08d5902706927fbc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord775
ord766
ord761
ord763
ord781
ord370
ord762
ord759
ord686
ord214
ord497
ord374
ord713
ord461
ord465
ord740
ord714
ord463
ord464
ord397
ord334
ord654
ord361
ord276
ord282
ord729
ord323
ord269
ord332
ord352
ord395
ord289
ord429
ord321
ord306
ord592
ord704
ord350
ord268
user32
ord530
ord307
ord291
ord140
ord521
ord175
ord370
ord432
ord234
ord490
ord403
ord220
ord229
ord198
ord453
ord10
ord178
ord177
ord231
gdi32
ord169
ord175
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE