Static task
static1
Behavioral task
behavioral1
Sample
c49e254011665041831f206a049d2bb0c886b64b006e7692f13b268f9ac9bda9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c49e254011665041831f206a049d2bb0c886b64b006e7692f13b268f9ac9bda9.exe
Resource
win10v2004-20220812-en
General
-
Target
c49e254011665041831f206a049d2bb0c886b64b006e7692f13b268f9ac9bda9
-
Size
456KB
-
MD5
0aadd5b85a9a1dc37a3efe5448f17ad3
-
SHA1
3c314fcfe4533d35f3396a885d71ebc540cef721
-
SHA256
c49e254011665041831f206a049d2bb0c886b64b006e7692f13b268f9ac9bda9
-
SHA512
29cf6082901e6c0034fdcde867fef7db457b041c00c6c9c09abb25f84a8f11d210ac7039dc08b8e6a95c454bbcfcc84fc73e38f8b0b5e8c34045c7e04fd1aed2
-
SSDEEP
3072:Bxvyk5cb4FOP05lekJhkeTxObQdcvlhtBCmtQr5obER:BzCPkl5JhvTcb2cvJBPt4AER
Malware Config
Signatures
Files
-
c49e254011665041831f206a049d2bb0c886b64b006e7692f13b268f9ac9bda9.exe windows x86
0c1b17895074caa4bce30f8003fbe592
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
GetProcAddress
GetCommandLineA
GetVersionExA
GetModuleHandleA
GetStartupInfoA
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bdq7ob2 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE