Static task
static1
Behavioral task
behavioral1
Sample
549c4a686b35f6a77d73349e329012a838877573cb0ce44bb47ed6372c7a155c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
549c4a686b35f6a77d73349e329012a838877573cb0ce44bb47ed6372c7a155c.exe
Resource
win10v2004-20220812-en
General
-
Target
549c4a686b35f6a77d73349e329012a838877573cb0ce44bb47ed6372c7a155c
-
Size
162KB
-
MD5
719d443e30c55c06a6eee295fd4553d0
-
SHA1
5cc36b53e82f593d916d50597e93c750392c7068
-
SHA256
549c4a686b35f6a77d73349e329012a838877573cb0ce44bb47ed6372c7a155c
-
SHA512
101714db7070204d0899f33fe233670842b623f2efcd505600794812f13a86ac8b29750c40b5a181a02b2e891db28ea6bf7c10a2c498ac95a5eec8ea9f4f6ed0
-
SSDEEP
3072:nQ0kMPr2ENjyAYNVMkGC5InhE+jIB+FB9H80vrvHiDQipJZOPnnN5wJVWVXIjik:QlArDRDk2E+EIFB9H8KuDQInOECXO
Malware Config
Signatures
Files
-
549c4a686b35f6a77d73349e329012a838877573cb0ce44bb47ed6372c7a155c.exe windows x86
91d57720a119d8b9f099deec4276c60b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
GetPrivateProfileSectionA
CreateFileA
GetTempFileNameA
CreateWaitableTimerW
GlobalFlags
GlobalFree
OpenFileMappingA
GlobalGetAtomNameW
SetThreadPriorityBoost
GetFullPathNameA
FindResourceA
InterlockedDecrement
SetCalendarInfoA
FindResourceExW
WriteProfileSectionW
FatalExit
SetThreadAffinityMask
TransactNamedPipe
SetFilePointer
WaitNamedPipeA
GetTimeZoneInformation
FormatMessageA
FindResourceExA
GlobalAddAtomA
GetModuleHandleA
SuspendThread
TlsAlloc
OutputDebugStringW
GetStdHandle
GetVolumeNameForVolumeMountPointA
GetProcessAffinityMask
GetUserDefaultUILanguage
CloseHandle
GetThreadSelectorEntry
user32
DdeSetQualityOfService
CharPrevExA
EnumDesktopsA
SetMessageQueue
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 471B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjegrzw Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE