Static task
static1
Behavioral task
behavioral1
Sample
b49d79897fd3157a28ccdadf30de0e533e7b6a18df7274d364dc5e81da77b852.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b49d79897fd3157a28ccdadf30de0e533e7b6a18df7274d364dc5e81da77b852.exe
Resource
win10v2004-20220901-en
General
-
Target
b49d79897fd3157a28ccdadf30de0e533e7b6a18df7274d364dc5e81da77b852
-
Size
328KB
-
MD5
d257ffc7022378fb6be749e52b740c90
-
SHA1
ed2970a5c187f73c8166d07069d098ab6ce5b1b9
-
SHA256
b49d79897fd3157a28ccdadf30de0e533e7b6a18df7274d364dc5e81da77b852
-
SHA512
8c803221bb0e4f242e6febc8712fede0f8ba6c757a2a707eb699d8e40dee1e9cfafcc68fab57c420c710c2110be12b6bb0999d35b16d595db597eab6125d92e4
-
SSDEEP
6144:UQbkUxwuJJ8G6UYE4TdQE2DLEzuZXFXhUiZlvoXuoDiPpEldTr4vbvx:vL/AVTdQEPuXR9oXzGaT2Lx
Malware Config
Signatures
Files
-
b49d79897fd3157a28ccdadf30de0e533e7b6a18df7274d364dc5e81da77b852.exe windows x86
e654fcdf679a9f30a22a376d8623c58a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
GetLastError
FindClose
GetDiskFreeSpaceExA
EnumResourceTypesW
GetModuleHandleA
FreeConsole
LocalFree
ResetEvent
GetCommandLineA
IsBadStringPtrA
VirtualProtect
IsBadReadPtr
LoadLibraryExW
SetLastError
CloseHandle
GetDriveTypeW
DeleteCriticalSection
GetDateFormatA
TlsGetValue
advapi32
CloseTrace
RegCreateKeyExA
RegCloseKey
AccessCheck
IsTokenUntrusted
GetFileSecurityA
LsaSetSecret
CloseEventLog
OpenEventLogA
LsaFreeMemory
RegLoadKeyA
FreeSid
LsaClose
RegCloseKey
glmf32
glsGetError
glsChannel
glsBlock
glsBinary
glsCharubz
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ