Static task
static1
Behavioral task
behavioral1
Sample
50b06de4091ec57123a3f42ca45f1337d6008eaa89604f156f33060384690a2f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
50b06de4091ec57123a3f42ca45f1337d6008eaa89604f156f33060384690a2f.exe
Resource
win10v2004-20220812-en
General
-
Target
50b06de4091ec57123a3f42ca45f1337d6008eaa89604f156f33060384690a2f
-
Size
119KB
-
MD5
4b5db4748a9104c6841bfc867ad0abbd
-
SHA1
7268d82414237ae41dbeb37bb13f28841a5710ac
-
SHA256
50b06de4091ec57123a3f42ca45f1337d6008eaa89604f156f33060384690a2f
-
SHA512
f80285ee9a6bf1a0994a6a161824709178bab0aa8e41fb094f7608ab682c7905b97ef79c93080eb73440f5ab670515bc5a4c4e7f6d3bfb12f088f009bf77235d
-
SSDEEP
1536:G8888JzBkRr9bjQ3uJbKefcowQrXnpQjnquji+/vXJzSAkpjVrs2ryrd1vUQuqSv:s2k38bK+SQkrL/v5zS1Hs2qxnC
Malware Config
Signatures
Files
-
50b06de4091ec57123a3f42ca45f1337d6008eaa89604f156f33060384690a2f.exe windows x86
20b0062fe0788be009bb46c67b5e0bc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessDEPPolicy
GetFileType
DeleteVolumeMountPointW
WriteConsoleOutputAttribute
IsValidCodePage
OpenMutexA
CreateFileW
SetLastError
GlobalCompact
GetVolumePathNameA
PrivMoveFileIdentityW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE