Static task
static1
Behavioral task
behavioral1
Sample
a50e9527c9919d115ada3a6337f854cfd77384296e63fb64fbb358a71d20a31b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a50e9527c9919d115ada3a6337f854cfd77384296e63fb64fbb358a71d20a31b.exe
Resource
win10v2004-20220812-en
General
-
Target
a50e9527c9919d115ada3a6337f854cfd77384296e63fb64fbb358a71d20a31b
-
Size
180KB
-
MD5
387b00428d6a7d8c3a4f7a6c6de2bfcb
-
SHA1
d8b20edf5fd13249d15c0b5a6210a0601fd33652
-
SHA256
a50e9527c9919d115ada3a6337f854cfd77384296e63fb64fbb358a71d20a31b
-
SHA512
6599c745b9a90aaf86628c032de5fc55c327be9b95731779ddd723348ee164b879c30f1b9387a2d57f49fd33d17008d64d8e266d6d73b85dec15ea7ee343051c
-
SSDEEP
3072:7ofKHb2VlNw6zZvQB1aH7lVRwFizDC/exZBVD0S2H8ju1:7ofmbENfznH7lnblz7gb6u1
Malware Config
Signatures
Files
-
a50e9527c9919d115ada3a6337f854cfd77384296e63fb64fbb358a71d20a31b.exe windows x86
2cf082f78fe51269f192ea43727c71c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
WriteFile
CloseHandle
CreateFileA
RemoveDirectoryA
SetConsoleMode
HeapSize
advapi32
RegOpenKeyExA
ClearEventLogA
GetPrivateObjectSecurity
IsTextUnicode
LogonUserA
Sections
.bihkp Size: 36KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dih Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fav Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmz Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE