Static task
static1
Behavioral task
behavioral1
Sample
50ce519478146fe79899193106297ded6e96b5de772c9202962f9dad30f5b704.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
50ce519478146fe79899193106297ded6e96b5de772c9202962f9dad30f5b704.exe
Resource
win10v2004-20221111-en
General
-
Target
50ce519478146fe79899193106297ded6e96b5de772c9202962f9dad30f5b704
-
Size
241KB
-
MD5
1e8d8970fb3f0f70155aefdd3f160fd0
-
SHA1
d8fddec70b4a6dbe1034a8a6f5e06966a016ee77
-
SHA256
50ce519478146fe79899193106297ded6e96b5de772c9202962f9dad30f5b704
-
SHA512
1868069e0232012a846ac9a64e47b2d8288e1d42bb824f9369010fa67387d4bdd8541525faef53ff87d007745e3d7eba0e4e528dab8d13b9b2a95dc4ef15e1d4
-
SSDEEP
6144:0NRy73TqJ6kZD7QJp7bCcoshULjETrVhEosx:0NRoGJ6kZXap3CNkUarTEH
Malware Config
Signatures
Files
-
50ce519478146fe79899193106297ded6e96b5de772c9202962f9dad30f5b704.exe windows x86
fce574a1e89e5de17a633ffa305ac007
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReleaseMutex
ReleaseMutex
LocalFree
HeapCreate
lstrcatA
GetComputerNameA
GetSystemTime
LoadLibraryA
SetLastError
FindAtomA
GetTickCount
GetDriveTypeW
SetEvent
GetCommandLineA
GetDiskFreeSpaceW
CreateThread
CloseHandle
GetFileAttributesA
LoadLibraryW
user32
GetDlgItem
CloseWindow
DestroyCaret
FillRect
GetClassInfoA
CreateWindowExA
DrawStateA
DispatchMessageA
CallWindowProcA
SetFocus
GetClipCursor
GetKeyState
GetComboBoxInfo
cryptnet
CryptGetTimeValidObject
CryptGetObjectUrl
CryptCancelAsyncRetrieval
CertDllVerifyCTLUsage
CryptUninstallCancelRetrieval
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ