Static task
static1
Behavioral task
behavioral1
Sample
50e896d477cbd7f88659bb219e3d9e2989eb476218a3c6a27327c72f7719a7c7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
50e896d477cbd7f88659bb219e3d9e2989eb476218a3c6a27327c72f7719a7c7.exe
Resource
win10v2004-20220812-en
General
-
Target
50e896d477cbd7f88659bb219e3d9e2989eb476218a3c6a27327c72f7719a7c7
-
Size
856KB
-
MD5
4b39bd6cffedb22439bc50d572f78b09
-
SHA1
200ad8e63459e76fa468ebab78fc759bfaa1725c
-
SHA256
50e896d477cbd7f88659bb219e3d9e2989eb476218a3c6a27327c72f7719a7c7
-
SHA512
c6b651bcd3517d90b7c0569eb1611040d3e620a90d3681cea529b5f248da74f4300bd3e7952ed3c8ecde93344eb304d6c944ab5cf37448700edcdddd2d182fb7
-
SSDEEP
24576:g4c4cob/Am3qZihoqVBiKuMO/yskYfbseZbgAQ:gro7Aw0iTVBngyskYTZbw
Malware Config
Signatures
Files
-
50e896d477cbd7f88659bb219e3d9e2989eb476218a3c6a27327c72f7719a7c7.exe windows x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zhegtcdz Size: 820KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
blsymhsv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE