Static task
static1
Behavioral task
behavioral1
Sample
e49f14d941cf3de28554446080a32b99694bd3a1efe754639d6d1c7bf898e880.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e49f14d941cf3de28554446080a32b99694bd3a1efe754639d6d1c7bf898e880.exe
Resource
win10v2004-20220901-en
General
-
Target
e49f14d941cf3de28554446080a32b99694bd3a1efe754639d6d1c7bf898e880
-
Size
186KB
-
MD5
0b9e2c615b1c4efd91d2909311ae1437
-
SHA1
4c8492a11973c4670077bfda3c1bcaa70c0165b7
-
SHA256
e49f14d941cf3de28554446080a32b99694bd3a1efe754639d6d1c7bf898e880
-
SHA512
2b92963b6803e00ae84f476dff85da32a00d6494c95ff1762fd7017a9eeb89a55a4a2e765261154bf0eebf2f8a6ed7560c8bc6514747c928b92843cf8e16e6ac
-
SSDEEP
3072:U4fD8fhum+aQsLpDteM3/SMQzu/v43NTi0imn0Xz3grpk3RgaTPV:zD8Ym+aT1DQeGu/vuRi0VI0p0RR
Malware Config
Signatures
Files
-
e49f14d941cf3de28554446080a32b99694bd3a1efe754639d6d1c7bf898e880.exe windows x86
3f0271f97e7a1b91c917ab4fdf8d6d47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
WriteFile
RaiseException
VirtualProtect
LCMapStringA
HeapAlloc
Sleep
LeaveCriticalSection
GetModuleHandleA
GetSystemDefaultLCID
GetModuleFileNameA
GlobalUnlock
SetThreadLocale
GetVersionExA
ExitProcess
GetACP
VirtualFree
CloseHandle
SetFilePointer
GetModuleHandleW
GetStartupInfoA
EnterCriticalSection
InterlockedDecrement
CompareStringA
SetConsoleCP
GetFileSize
SetLastError
GetVersion
SetEvent
MapViewOfFile
lstrcmpA
MulDiv
QueryPerformanceCounter
GetOEMCP
SetStdHandle
InterlockedExchange
GetFileType
LoadLibraryA
FreeLibrary
user32
GetKeyState
ReleaseCapture
SetWindowPos
DestroyMenu
IsWindow
TrackPopupMenu
SetWindowLongW
InflateRect
GetTopWindow
SetTimer
msvcrt
exit
wcstoul
wcstol
_CxxThrowException
??0exception@@QAE@XZ
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ