Static task
static1
Behavioral task
behavioral1
Sample
50DA248332E17121AF01CD7929069B7F.exe
Resource
win7-20220718-en
General
-
Target
50DA248332E17121AF01CD7929069B7F.fil
-
Size
7.1MB
-
MD5
50da248332e17121af01cd7929069b7f
-
SHA1
0fe37d82a25b11f189fae1469352851a0e6f2a87
-
SHA256
6254f13144bdddb0931ad447830f9af5281cbb8f6b77c2a1357940762dbc4cc9
-
SHA512
af35df32c61cd0b3dfdd9ab378fbd12e3e57f28fd6759e7aaaec8f8409a30a66c963a386311b4dea47f050816008acb33f71fbcca275039523a7b938841e0812
-
SSDEEP
196608:9LpTDu3zy49Bm+QC5m/G15UkA2Lmf4gcGbEoB+i2Mjyn:9A3zBBXLM/cUILmf4LOd+i2t
Malware Config
Signatures
Files
-
50DA248332E17121AF01CD7929069B7F.fil.exe windows x86
28d61e35731774fb9882b8ec9feeac5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDesktopWindow
CharUpperBuffW
gdi32
BitBlt
advapi32
CryptDecrypt
shell32
SHFileOperationW
ole32
CreateStreamOnHGlobal
shlwapi
wnsprintfA
bcrypt
BCryptDestroyKey
crypt32
CryptUnprotectData
wininet
InternetReadFile
gdiplus
GdipGetImageEncodersSize
Sections
.text Size: - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.|?T Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.W%. Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xz| Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ