Static task
static1
Behavioral task
behavioral1
Sample
1e49ca403e1c77f371942b13e6d99cbc4d57595c16d91f68d70296733c1887a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e49ca403e1c77f371942b13e6d99cbc4d57595c16d91f68d70296733c1887a7.exe
Resource
win10v2004-20220901-en
General
-
Target
1e49ca403e1c77f371942b13e6d99cbc4d57595c16d91f68d70296733c1887a7
-
Size
63KB
-
MD5
319ba518474de816adf611e21ca6d670
-
SHA1
990730fbcbcd4582f68aaf320e1447e3b7637042
-
SHA256
1e49ca403e1c77f371942b13e6d99cbc4d57595c16d91f68d70296733c1887a7
-
SHA512
0ac919dfe7b19745127cc5d734b27461755f3b601a9a79aaed73b72b212c2b720139c978f6ad8976ccc638a0bf55c9eae4379f5ff6a46ac478ad7bd141b2e881
-
SSDEEP
768:R87lf0GgG1nKf4TaPMn49Gx1tRnkd7SGmbt3PjAV6enwZgrxRW/WnUUNM6nfAwO3:apqtYhkdcf8nAgrm/XUNMqSuUwHC/VJj
Malware Config
Signatures
Files
-
1e49ca403e1c77f371942b13e6d99cbc4d57595c16d91f68d70296733c1887a7.exe windows x86
34396a860fe95cc9ac74cd8b4cfd1ca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOverlappedResult
ReadConsoleW
BaseCleanupAppcompatCacheSupport
EscapeCommFunction
SetProcessShutdownParameters
lstrlenA
GetConsoleTitleA
GetLogicalDriveStringsW
EndUpdateResourceA
SetFileAttributesA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE