Static task
static1
Behavioral task
behavioral1
Sample
f30bb8c96645069a6f08563d71046323e2aedeb997154672c24590056783a63b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f30bb8c96645069a6f08563d71046323e2aedeb997154672c24590056783a63b.exe
Resource
win10v2004-20221111-en
General
-
Target
f30bb8c96645069a6f08563d71046323e2aedeb997154672c24590056783a63b
-
Size
33KB
-
MD5
49279ce4a395d4e7085b64ad331ab138
-
SHA1
3ec4e79f66f0444507824ffa3b56d0bafabc7dfc
-
SHA256
f30bb8c96645069a6f08563d71046323e2aedeb997154672c24590056783a63b
-
SHA512
ea769d70e91dc93134e7d011049b02a0e61b17ff7e0fe309ac11186179b63f9abce192e73b0ef0c884b412de3d2524efe23123842ce19641ce46e43e1b316b36
-
SSDEEP
192:lvmd/4MOk7oyuxSsa0qU7i1qPYl9d9Klaq95quZycVIbAx3w28WDY:Zmdp0tSsatZsDyD0Y
Malware Config
Signatures
Files
-
f30bb8c96645069a6f08563d71046323e2aedeb997154672c24590056783a63b.exe windows x86
940c9c497bceb6583044063ce261c952
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetLastError
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
advapi32
RegOpenKeyW
RegOpenKeyA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text5 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewtwe1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewtwe2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewtwe3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewtwe4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewtwe5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ