Static task
static1
Behavioral task
behavioral1
Sample
c50570b88136c04658d386e9ff62f9704af9771cf558b2287c48afc921bb51b6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c50570b88136c04658d386e9ff62f9704af9771cf558b2287c48afc921bb51b6.exe
Resource
win10v2004-20220901-en
General
-
Target
c50570b88136c04658d386e9ff62f9704af9771cf558b2287c48afc921bb51b6
-
Size
129KB
-
MD5
003767764f255296d064986ec0927c56
-
SHA1
d7141aed1f0fecb37de015a9de0611f580a74d42
-
SHA256
c50570b88136c04658d386e9ff62f9704af9771cf558b2287c48afc921bb51b6
-
SHA512
f1bbe8a0d291c156ffa63ed93f4d23525332a8d588b81ff50828d462773d49f9df735472864a4f12af8926387e6a1a963b9dd8f5444b61b044d7ed31d6706e43
-
SSDEEP
3072:rXf/1B3JwnvoiGPn5J9Zx4VeiTctoHeoQ:rvNhJwn+FbiYtoK
Malware Config
Signatures
Files
-
c50570b88136c04658d386e9ff62f9704af9771cf558b2287c48afc921bb51b6.exe windows x86
a013c739e15630553684cddc314fb8b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetLastError
DeviceIoControl
FindClose
FindFirstFileA
GetTempFileNameA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
TerminateProcess
GetVersionExA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetOEMCP
GetACP
GetPrivateProfileStringA
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
WriteFile
GetTempPathA
CloseHandle
GetFileAttributesA
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetCPInfo
HeapSize
HeapReAlloc
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
GetFileType
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapFree
RtlUnwind
LocalFree
user32
wsprintfA
GetSysColor
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
ShellExecuteExA
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
oleaut32
VariantClear
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
iphlpapi
GetAdaptersInfo
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE