Static task
static1
Behavioral task
behavioral1
Sample
50f56f7ff1fe27d3b3dcff554ad49e9982d93148ece503a2e04807ff9b43f92b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50f56f7ff1fe27d3b3dcff554ad49e9982d93148ece503a2e04807ff9b43f92b.exe
Resource
win10v2004-20220812-en
General
-
Target
50f56f7ff1fe27d3b3dcff554ad49e9982d93148ece503a2e04807ff9b43f92b
-
Size
115KB
-
MD5
665a2fd3dcd164632de7247302b6db00
-
SHA1
5eecd7cf7db91a8f52108df9e4d049981a7186d6
-
SHA256
50f56f7ff1fe27d3b3dcff554ad49e9982d93148ece503a2e04807ff9b43f92b
-
SHA512
d61bded6e5685562c09b402229da6fea2621743c5505cc823c4bc58b663f8c37ddcfe49a372541e962e051aac2767eae1e2dde4dbaaf4a0f1e12e925eb765183
-
SSDEEP
3072:d2JcwRXY8oT47QzZReYzxFyO4TSD1cU4:TeI95z/eYz0TSpU
Malware Config
Signatures
Files
-
50f56f7ff1fe27d3b3dcff554ad49e9982d93148ece503a2e04807ff9b43f92b.exe windows x86
051edf354d278b4dc3952429b4c6e2db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenW
GetFileTime
WriteConsoleW
ReleaseMutex
ReadFile
SetPriorityClass
IsBadStringPtrA
FormatMessageA
GetCurrentDirectoryA
WriteConsoleW
lstrcpyW
GetLastError
CloseHandle
IsValidLocale
GetFileAttributesA
GetModuleHandleA
HeapCreate
FindResourceA
GetStartupInfoA
GetFileSize
WriteConsoleW
msftedit
RichComboBoxWndProc
RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
clbcatq
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
DllGetClassObject
SetSetupSave
SetupOpen
CheckMemoryGates
SetupOpen
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetupOpen
SetSetupSave
dsprop
CheckADsError
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE