Static task
static1
Behavioral task
behavioral1
Sample
50e6148b8d1a3ea27db5778742d6d7f6195795ce1ccf2ca80c564a57a3fa470d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50e6148b8d1a3ea27db5778742d6d7f6195795ce1ccf2ca80c564a57a3fa470d.exe
Resource
win10v2004-20220901-en
General
-
Target
50e6148b8d1a3ea27db5778742d6d7f6195795ce1ccf2ca80c564a57a3fa470d
-
Size
170KB
-
MD5
641e6fa72e8230b6dfbfaa298d3ad1a0
-
SHA1
f5601a30e9c1c0c057165b12d78542a1f97ccaff
-
SHA256
50e6148b8d1a3ea27db5778742d6d7f6195795ce1ccf2ca80c564a57a3fa470d
-
SHA512
08039dd453106b236d00b4cef7c448d71f8e82d28f76c4b0177ba14d50476126f82440459f7aaa6e9bdf96ef50b979778e201317e94053b42babca6d0eda4733
-
SSDEEP
3072:OoTjpSbHNtkJ5l9HuWKeCIJZUbpMRpoy1WQmQKIPrbtCEJQE4JMnvrZnFy0GIj:fuEGpbyvgQmN7
Malware Config
Signatures
Files
-
50e6148b8d1a3ea27db5778742d6d7f6195795ce1ccf2ca80c564a57a3fa470d.exe windows x86
cc2a87172e49cd61f969d4c50aa2ede5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysReAllocStringLen
VariantClear
VariantCopyInd
VariantChangeTypeEx
SysAllocStringLen
SysFreeString
SysStringLen
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
advapi32
AdjustTokenPrivileges
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueA
OpenProcessToken
RegQueryValueExA
LookupPrivilegeValueA
RegCloseKey
RegOpenKeyExA
gdi32
SetBkMode
GetCurrentPositionEx
GetWinMetaFileBits
CreateBitmap
StretchBlt
SaveDC
DeleteObject
SelectPalette
SetStretchBltMode
CombineRgn
MaskBlt
LineTo
CreateCompatibleDC
CreateRectRgn
SelectObject
SetDIBColorTable
SetBkColor
CreateBrushIndirect
IntersectClipRect
CreatePalette
GetSystemPaletteEntries
CreateHalftonePalette
GetPixel
GetWindowOrgEx
CreateSolidBrush
CreateFontIndirectA
RestoreDC
GetDIBColorTable
SetWinMetaFileBits
UnrealizeObject
SetViewportOrgEx
SetWindowOrgEx
PatBlt
GetRgnBox
PlayEnhMetaFile
GetDCOrgEx
GetClipBox
BitBlt
RectVisible
CreateDIBitmap
ExcludeClipRect
GetPaletteEntries
CreateDIBSection
GetDeviceCaps
Rectangle
SetTextColor
GetTextExtentPoint32A
GetStockObject
DeleteDC
GetEnhMetaFileHeader
CreatePenIndirect
GetObjectA
RealizePalette
SetROP2
MoveToEx
GetTextMetricsA
Polyline
CreateCompatibleBitmap
CopyEnhMetaFileA
GetEnhMetaFilePaletteEntries
GetBrushOrgEx
DeleteEnhMetaFile
SetPixel
GetBitmapBits
SetBrushOrgEx
GetEnhMetaFileBits
kernel32
GetSystemDirectoryA
WinExec
GetCurrentProcessId
GetModuleHandleA
lstrcmpA
GlobalDeleteAtom
LoadResource
CreateThread
RaiseException
SetThreadLocale
GetLocaleInfoA
GetVersion
TlsAlloc
GetProcessHeap
lstrcpynA
GlobalAddAtomA
WriteFile
HeapFree
CloseHandle
SetErrorMode
GetCommandLineA
TlsFree
GetCurrentThreadId
SetEndOfFile
SetHandleCount
CompareStringA
GetStdHandle
SetLastError
GetVersionExA
ReadFile
UnhandledExceptionFilter
WaitForSingleObject
CreateFileA
VirtualQuery
FreeResource
MultiByteToWideChar
GetSystemInfo
SetEvent
FreeLibrary
EnumCalendarInfoA
GetCPInfo
GlobalFree
GetStringTypeW
SetConsoleCtrlHandler
FormatMessageA
GetLocalTime
InterlockedIncrement
GetProcAddress
GetOEMCP
Sleep
FindResourceA
LoadLibraryExA
GetCurrentProcess
lstrcpyA
MulDiv
FindClose
TlsGetValue
CreateEventA
GetThreadLocale
GetFileType
FindFirstFileA
GetACP
LockResource
InitializeCriticalSection
VirtualFree
VirtualAlloc
SizeofResource
GlobalAlloc
DeleteFileA
ExitProcess
LocalFree
GlobalReAlloc
TlsSetValue
LeaveCriticalSection
GetStartupInfoA
GlobalUnlock
DeleteCriticalSection
LoadLibraryA
GlobalHandle
GetWindowsDirectoryA
GetFileSize
HeapAlloc
GetModuleFileNameA
SetFilePointer
lstrlenA
RtlUnwind
GetDiskFreeSpaceA
GlobalLock
EnterCriticalSection
GetPrivateProfileStringA
GetTickCount
InterlockedDecrement
GetEnvironmentStringsA
GetLastError
LocalAlloc
WideCharToMultiByte
user32
LoadStringA
GetCapture
IsDialogMessageA
SetTimer
GetDCEx
GetMenuState
CharNextA
InsertMenuItemA
PostQuitMessage
DefMDIChildProcA
GetPropA
ScreenToClient
wsprintfA
GetWindowThreadProcessId
GetWindowDC
KillTimer
PeekMessageA
DestroyMenu
SetWindowPlacement
TranslateMDISysAccel
DrawEdge
GetScrollInfo
GetKeyboardLayout
SetClassLongA
InvalidateRect
FindWindowA
ExitWindowsEx
LoadCursorA
DrawFrameControl
DefWindowProcA
GetLastActivePopup
SystemParametersInfoA
RedrawWindow
GetKeyState
ActivateKeyboardLayout
SetWindowLongA
DispatchMessageA
WindowFromPoint
GetMenuItemID
IsWindowVisible
GetMenuStringA
ShowCursor
GetActiveWindow
SetPropA
InsertMenuA
SetForegroundWindow
TranslateMessage
GetCursorPos
IntersectRect
CreateWindowExA
RemoveMenu
GetClientRect
EnableScrollBar
GetKeyboardType
DrawIconEx
OffsetRect
LoadKeyboardLayoutA
SetScrollPos
SetWindowsHookExA
TrackPopupMenu
MapVirtualKeyA
LoadBitmapA
IsChild
GetMenuItemInfoA
RegisterClipboardFormatA
GetSystemMenu
SetScrollInfo
RemovePropA
GetDesktopWindow
DestroyWindow
ShowWindow
GetWindowPlacement
SetScrollRange
CallWindowProcA
UnhookWindowsHookEx
BeginPaint
GetWindowLongA
ReleaseCapture
LoadIconA
GetWindowTextA
SendMessageA
EnumThreadWindows
GetMenuItemCount
GetCursor
DestroyIcon
SetCursor
SetCapture
RegisterClassA
AdjustWindowRectEx
SetWindowPos
EndPaint
FrameRect
WaitMessage
GetWindowRect
EqualRect
UpdateWindow
GetDC
DefFrameProcA
MessageBoxA
CheckMenuItem
GetForegroundWindow
RegisterWindowMessageA
GetSubMenu
GetScrollRange
InflateRect
WinHelpA
EnableWindow
DestroyCursor
IsZoomed
EnableMenuItem
GetTopWindow
GetSystemMetrics
IsWindow
DeleteMenu
SetMenu
IsIconic
GetFocus
GetSysColor
PostMessageA
CreatePopupMenu
CharLowerBuffA
GetMenu
ScrollWindow
GetKeyNameTextA
GetKeyboardState
ShowOwnedPopups
IsRectEmpty
SetMenuItemInfoA
SetActiveWindow
IsWindowEnabled
GetClipboardData
CreateMenu
GetIconInfo
DrawTextA
CallNextHookEx
CreateIcon
GetClassInfoA
GetKeyboardLayoutList
ClientToScreen
UnregisterClassA
ReleaseDC
FillRect
SetRect
DrawIcon
ShowScrollBar
GetScrollPos
CharLowerA
PtInRect
GetWindow
MapWindowPoints
SetFocus
OemToCharA
EnumWindows
DrawMenuBar
ole32
IsEqualGUID
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ