Static task
static1
Behavioral task
behavioral1
Sample
50da6182626394aa112715bb3d55401085c2669c0c188e3ad86a1d4f2d85c411.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50da6182626394aa112715bb3d55401085c2669c0c188e3ad86a1d4f2d85c411.exe
Resource
win10v2004-20220812-en
General
-
Target
50da6182626394aa112715bb3d55401085c2669c0c188e3ad86a1d4f2d85c411
-
Size
63KB
-
MD5
78b9bda427d8b5c5225e6c65d31b2a34
-
SHA1
7e402f123ebb8a0cf737d46a8953e95f528d9138
-
SHA256
50da6182626394aa112715bb3d55401085c2669c0c188e3ad86a1d4f2d85c411
-
SHA512
4a5be6727a77c644b57b77700f8486da64f01de1e71c1a7cd31fe588032da3db111e029ad84bed4d0a4a111b310a82f7e7f4e8f22a918c32e68a7ea29b66b67c
-
SSDEEP
768:GGVzN9useGXfH2Q5P/9QJi+GmyHMZBlJylBe4q9hDGAKHeumX8QFI7NBkREJoO:7B9Y4H7q29sDlifqh+HWX1I7NCGJoO
Malware Config
Signatures
Files
-
50da6182626394aa112715bb3d55401085c2669c0c188e3ad86a1d4f2d85c411.exe windows x86
9c1aded922e2aaaab5e03b08a356418b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
CreateMailslotA
CompareStringA
HeapCreate
FindResourceA
GetConsoleAliasA
GetModuleHandleA
DeviceIoControl
EncodeSystemPointer
SetFileAttributesA
IsBadStringPtrA
ConnectNamedPipe
QueryDosDeviceA
IsBadWritePtr
IsBadCodePtr
CancelIo
GetCPInfo
GetEnvironmentVariableA
dsprop
ReportError
ErrMsg
crypt32
CertAlgIdToOID
CertNameToStrA
CertCloseStore
CryptFindOIDInfo
CertCreateCRLContext
CertDuplicateCRLContext
CertFindChainInStore
clbcatq
SetSetupSave
ComPlusMigrate
DllGetClassObject
SetupOpen
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ