Static task
static1
Behavioral task
behavioral1
Sample
cd49672bbf077b33079d0557f3b9209a3d9be178e6fdaa6543df34a544635bb4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd49672bbf077b33079d0557f3b9209a3d9be178e6fdaa6543df34a544635bb4.exe
Resource
win10v2004-20221111-en
General
-
Target
cd49672bbf077b33079d0557f3b9209a3d9be178e6fdaa6543df34a544635bb4
-
Size
301KB
-
MD5
35e552e48e438f4c1600f63b79233d12
-
SHA1
8538c35eca482843ff7a3f5eed740ac1dca3b4d5
-
SHA256
cd49672bbf077b33079d0557f3b9209a3d9be178e6fdaa6543df34a544635bb4
-
SHA512
20c7071c45eee1c973dd766d7cf43befa3f26d82c3c0857bf80bf239ff5bb8bde91b96e32021bdbd29b3ac45839e2fb799a75ca6adf556f609eda5e23d67d8b2
-
SSDEEP
6144:SP9RsXYjNyhhv0y+tL8XaszVIML7uezJDWy1VK7ni:W9RvyUy+tQaeRDc7i
Malware Config
Signatures
Files
-
cd49672bbf077b33079d0557f3b9209a3d9be178e6fdaa6543df34a544635bb4.exe windows x86
8987852f5148f09b5c268adef24a0ebd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ReadFile
GetSystemInfo
user32
LoadIconA
LoadCursorA
advapi32
RegOpenKeyA
msvcrt
_XcptFilter
__getmainargs
__lconv_init
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_mbsinc
_mbslen
_mbsrchr
_stricmp
_strnicmp
exit
setlocale
strchr
strncpy
strtoul
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 834B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ