Static task
static1
Behavioral task
behavioral1
Sample
50691a77e2b8153d8061bd35d9280c0e69175196cdcf876203ccecf8bcfd7c19.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
50691a77e2b8153d8061bd35d9280c0e69175196cdcf876203ccecf8bcfd7c19.exe
Resource
win10v2004-20220901-en
General
-
Target
50691a77e2b8153d8061bd35d9280c0e69175196cdcf876203ccecf8bcfd7c19
-
Size
84KB
-
MD5
2ef8da551cf5ab2ab6e3514321791eab
-
SHA1
d618d2d2b8f272f75f1e89cb2023ea6a694b7773
-
SHA256
50691a77e2b8153d8061bd35d9280c0e69175196cdcf876203ccecf8bcfd7c19
-
SHA512
3073ed8a572a955ba120e2845819afe9e13d226879db7a0cd98752fd3e336a57baf17a97a38f94412eeb500fd0a0c8bac55fdbdfef2c7cbf970a7091cdfc0e00
-
SSDEEP
1536:S97iRkxTeSbKR0IlzUMp9ok6avzYc/Zt60tNd6:SRiSxbbq59PxT60tNd6
Malware Config
Signatures
Files
-
50691a77e2b8153d8061bd35d9280c0e69175196cdcf876203ccecf8bcfd7c19.exe windows x86
62ece4054893d325aa81d145d92fe428
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
InterlockedDecrement
GetProcAddress
LoadLibraryA
GetEnvironmentVariableW
lstrcatW
LocalFree
lstrlenA
GetThreadLocale
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
SetFilePointer
GetLastError
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RaiseException
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
InterlockedExchange
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
FindWindowA
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
GetErrorInfo
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ