Static task
static1
Behavioral task
behavioral1
Sample
e49cdd7b39bd5af734252ff3f6055b831aa2d7c706fd8d32c6b1c94405d558d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e49cdd7b39bd5af734252ff3f6055b831aa2d7c706fd8d32c6b1c94405d558d9.exe
Resource
win10v2004-20220812-en
General
-
Target
e49cdd7b39bd5af734252ff3f6055b831aa2d7c706fd8d32c6b1c94405d558d9
-
Size
390KB
-
MD5
e85361d3258a9209a6ba9344beeff354
-
SHA1
113af8829641979d433c8b4e379ded07494b3e4c
-
SHA256
e49cdd7b39bd5af734252ff3f6055b831aa2d7c706fd8d32c6b1c94405d558d9
-
SHA512
5aadaa775197cb780bbaf41fce9fb8a76e190944ae01472010e1bc494c5e0641a7334064b8de7276c13f2bc77959a07d7b5ba44c7c8915c7c51d83de4e9cfa1d
-
SSDEEP
12288:gM+hnDQweEJQ5kF+NkIRJ4MC2QObW/1V:gMynDDDuWKz1C2QObk
Malware Config
Signatures
Files
-
e49cdd7b39bd5af734252ff3f6055b831aa2d7c706fd8d32c6b1c94405d558d9.exe windows x86
f1e087e51e5700f816e711fcc612b44d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
VirtualFree
CloseHandle
GetLastError
GetSystemTime
WriteFile
VirtualAlloc
GetModuleHandleA
FindResourceA
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
DeleteFileA
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
LocalAlloc
GlobalFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
CreateDirectoryA
LocalFree
GetOEMCP
GetACP
Sleep
VirtualProtect
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetStringTypeW
user32
GetDesktopWindow
EnableWindow
GetDC
LoadBitmapA
MessageBoxA
FindWindowA
gdi32
GetObjectA
ole32
CoUninitialize
avifil32
AVIBuildFilterA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 326KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ