Static task
static1
Behavioral task
behavioral1
Sample
49524276ffd1e4d31416258e66df276fc5cac91b71bd6d2f1a1f785cfb50af43.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
49524276ffd1e4d31416258e66df276fc5cac91b71bd6d2f1a1f785cfb50af43.exe
Resource
win10v2004-20230220-en
General
-
Target
49524276ffd1e4d31416258e66df276fc5cac91b71bd6d2f1a1f785cfb50af43
-
Size
2.5MB
-
MD5
8dc8e1ab2cc98506a8c158c15f8b9022
-
SHA1
e35f607c6778ec9557bdb915b581936d78cdac4e
-
SHA256
49524276ffd1e4d31416258e66df276fc5cac91b71bd6d2f1a1f785cfb50af43
-
SHA512
d34f52b2cb90140d13f0ae55246c2a4a51cc86a43b5eac480d1d90f718f7231caeb63811f3196f890725cfdd91abc3e60b674c7ed62efff4f497914127303c67
-
SSDEEP
24576:t4ol05EHIYba9VX8HTaod5XW5CNAQQKnHZ4jZ4zbCN+K0plQpY+HlMfMOd4uPHPf:t4vxEjdVAQtWCzbrQEtxPl/sTJky6gol
Malware Config
Signatures
Files
-
49524276ffd1e4d31416258e66df276fc5cac91b71bd6d2f1a1f785cfb50af43.exe windows x86
35bab5753da7b523e8f8b925516fc3fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
iphlpapi
GetAdaptersInfo
winmm
midiStreamRestart
ws2_32
WSACleanup
kernel32
SetFilePointer
user32
GetClassNameA
gdi32
ExtSelectClipRgn
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetElement
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 1.2MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ