Static task
static1
Behavioral task
behavioral1
Sample
50abf0172e0d673240e66087ff7498f5a5441a8232e0bf8cea350c23dd80ef10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50abf0172e0d673240e66087ff7498f5a5441a8232e0bf8cea350c23dd80ef10.exe
Resource
win10v2004-20220812-en
General
-
Target
50abf0172e0d673240e66087ff7498f5a5441a8232e0bf8cea350c23dd80ef10
-
Size
91KB
-
MD5
4cfc0f6991ff2219ce9c11857d1fac30
-
SHA1
610b82c7b76c2bd746c8c310c8c8f4dd28cfe30e
-
SHA256
50abf0172e0d673240e66087ff7498f5a5441a8232e0bf8cea350c23dd80ef10
-
SHA512
e62a1c1d1f00facb926672cf369cf6416628ff4117b75043b61dd3eca472662a957a3bf64f05d7b8932d115d9133e99f5ff6916a6531bac5e7a2b8f328efa980
-
SSDEEP
1536:rJuZMCqXEK7u9bJAEF5djaQtcQ3deJdk14DIUbmCqMIr:VuZMCq0iYb6A5dRBeJdsYlIr
Malware Config
Signatures
Files
-
50abf0172e0d673240e66087ff7498f5a5441a8232e0bf8cea350c23dd80ef10.exe windows x86
4f325a4c7048a14e1ee7bee798f59ef1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
LocalAlloc
SetHandleCount
GetModuleHandleW
QueryPerformanceFrequency
GetThreadContext
Module32First
CompareStringA
ExitProcess
HeapFree
ExpandEnvironmentStringsA
FreeLibrary
SetThreadAffinityMask
lstrlenA
FindClose
WriteConsoleW
GetModuleHandleA
GetStartupInfoA
WriteConsoleA
GetEnvironmentStringsW
GlobalReAlloc
WideCharToMultiByte
GetFileType
LCMapStringA
Module32Next
user32
GetDlgItem
GetDlgCtrlID
CheckMenuRadioItem
SetDlgItemTextA
DrawEdge
GetWindowDC
BeginDeferWindowPos
GetSysColor
wsprintfA
GetClientRect
CheckDlgButton
DrawMenuBar
GetSystemMetrics
EnumWindows
MsgWaitForMultipleObjects
RegisterClassExA
DispatchMessageA
SetMenuItemInfoA
gdi32
CreateRectRgnIndirect
RectInRegion
CreateCompatibleBitmap
SetTextAlign
RestoreDC
Polyline
SetBkMode
SetBkColor
GetTextMetricsA
DeleteObject
GetStockObject
GetBkMode
CreatePen
BitBlt
CreateRectRgn
GetTextExtentPoint32A
msvcrt
_wremove
_exit
_cexit
_controlfp
_mbsnicmp
_fputchar
fwrite
is_wctype
__p__commode
__p__fmode
_except_handler3
memmove
_adjust_fdiv
_wgetenv
isspace
_acmdln
_wfopen
_umask
_snprintf
__setusermatherr
_wcstoui64
_nextafter
setbuf
_heapused
wcscat
_initterm
_adj_fdiv_m32i
_XcptFilter
__set_app_type
_wcsncoll
_adj_fptan
_toupper
memcpy
strcpy
log
_wstrdate
__getmainargs
exit
_utime64
_mbsnccnt
_wfreopen
_mbschr
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ