Static task
static1
Behavioral task
behavioral1
Sample
a50b32cd18aa847f294b73d83c78e57c627cd6adab2744dd4b6c8f07de593270.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a50b32cd18aa847f294b73d83c78e57c627cd6adab2744dd4b6c8f07de593270.exe
Resource
win10v2004-20220812-en
General
-
Target
a50b32cd18aa847f294b73d83c78e57c627cd6adab2744dd4b6c8f07de593270
-
Size
370KB
-
MD5
07ba12741275b1ce18d27eda4bd69df0
-
SHA1
8b27ea12ddb6621a863c80a0c91bc22784f0f959
-
SHA256
a50b32cd18aa847f294b73d83c78e57c627cd6adab2744dd4b6c8f07de593270
-
SHA512
e4e5ce0c918417f3e7425daa4f34f5fa37d7653d6a062e066a27ea6ef50f5790c7064332b7d92d8479656e18ee85e2e98ffcb592ff476f4d14b2a39358c40852
-
SSDEEP
6144:0TAjRM9t0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7jMb:0sjRMYHEAJLjpFv6w2K/PkFtlVMHFWgC
Malware Config
Signatures
Files
-
a50b32cd18aa847f294b73d83c78e57c627cd6adab2744dd4b6c8f07de593270.exe windows x86
f96be8d808e177204333bf82d406c154
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
HeapCreate
IsBadStringPtrW
GetCurrentProcessId
GetFileTime
GetCurrentThreadId
FindClose
FindAtomA
GetPrivateProfileStringA
GetDriveTypeA
lstrlenW
LoadLibraryW
GetEnvironmentVariableW
InitializeCriticalSection
ReleaseMutex
CreateEventW
LocalFree
ReleaseMutex
WriteFile
TlsGetValue
user32
DrawStateW
GetClientRect
GetKeyboardType
GetClassInfoA
EndDialog
DrawTextA
GetSysColor
DispatchMessageA
GetSysColor
IsWindow
CreateWindowExA
CallWindowProcW
SetFocus
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ