Static task
static1
Behavioral task
behavioral1
Sample
749454b19e138ccb0487c4f1682e0ebfa944d7f435902201fae69025223601fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
749454b19e138ccb0487c4f1682e0ebfa944d7f435902201fae69025223601fc.exe
Resource
win10v2004-20220812-en
General
-
Target
749454b19e138ccb0487c4f1682e0ebfa944d7f435902201fae69025223601fc
-
Size
24KB
-
MD5
4a06f6f5e5e115fb29d8463fdc8d037c
-
SHA1
a0b8c81a7213d947ad409cf97631522ff63be420
-
SHA256
749454b19e138ccb0487c4f1682e0ebfa944d7f435902201fae69025223601fc
-
SHA512
8577e3a50f553e99aca0764a6673131dbad25dce89f89e3a6bb234da25ab5351c7b7547e2ea2f325b301fb92be343156f7f0146a5ee483fbdc36a8aba852edc1
-
SSDEEP
192:4nOSjaAI8AxOpzA/X0kDF9UbbZdv/5uRctn9zHJbT+nsbM61oyaBMSs7:4nO05zA//DFCQQD+nX61QOSO
Malware Config
Signatures
Files
-
749454b19e138ccb0487c4f1682e0ebfa944d7f435902201fae69025223601fc.exe windows x86
6559d3cd093f259158873b96647246a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
GetProcAddress
FreeLibrary
LoadLibraryA
Sleep
GetSystemTime
GetTempPathA
CreateProcessA
DeleteFileA
Process32First
ExitProcess
GetCurrentProcessId
GetStartupInfoA
GetModuleHandleA
OpenProcess
CloseHandle
Process32Next
msvcrt
_strcmpi
_controlfp
??3@YAXPAX@Z
_except_handler3
fclose
fopen
fwrite
sprintf
fscanf
__CxxFrameHandler
_CxxThrowException
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
winmm
timeGetTime
psapi
GetModuleFileNameExA
ws2_32
inet_addr
shlwapi
PathFindFileNameA
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ