Static task
static1
Behavioral task
behavioral1
Sample
50f6a559539b67ae8030c641f449b54d828bd164ee9411d83f04d54e91a3df68.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
50f6a559539b67ae8030c641f449b54d828bd164ee9411d83f04d54e91a3df68.exe
Resource
win10v2004-20221111-en
General
-
Target
50f6a559539b67ae8030c641f449b54d828bd164ee9411d83f04d54e91a3df68
-
Size
389KB
-
MD5
4a6de6e8ba749b24126090db8bad31c0
-
SHA1
f6744ff053ae016ed654e67c63d67cdb65ba67c1
-
SHA256
50f6a559539b67ae8030c641f449b54d828bd164ee9411d83f04d54e91a3df68
-
SHA512
acb6ed40f9a4c19f5c4ef01b47bc73960d7b1dbd2d8cf3826ab2ca2235d3548984de4e10b49f5ceb027e6f50a8b7d170ba746870580255d7beaefcaeac52a6b2
-
SSDEEP
6144:IQD11v/igsoa2nrsH9yqpCx/aLA5CMJAz3YiIBn85DyIZowfd3ECLn3aIehSR/:FFvDhrsdy2ClIYpBn8dZbf3T3Pl
Malware Config
Signatures
Files
-
50f6a559539b67ae8030c641f449b54d828bd164ee9411d83f04d54e91a3df68.exe windows x86
d1cc485b12135c85db35c33441ee72e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sxs
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
kernel32
VirtualAlloc
GetWindowsDirectoryA
TlsFree
SizeofResource
CreateFileA
FindClose
GetACP
_lread
TlsFree
TlsFree
EnumSystemGeoID
GetConsoleTitleA
GlobalFree
DeleteAtom
GetVolumePathNameA
DuplicateHandle
EncodePointer
GlobalFree
AttachConsole
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
Beep
SetCommMask
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
Sections
.text Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 487KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE