Static task
static1
Behavioral task
behavioral1
Sample
50539a564b60eabb4186c5ea471b932a4d2006319654d40a533cc77b659122ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50539a564b60eabb4186c5ea471b932a4d2006319654d40a533cc77b659122ef.exe
Resource
win10v2004-20221111-en
General
-
Target
50539a564b60eabb4186c5ea471b932a4d2006319654d40a533cc77b659122ef
-
Size
488KB
-
MD5
014469b9f7371fca69a480aae8564000
-
SHA1
797f21ec645f1fd4b06ce455f9fca0001d22ab8a
-
SHA256
50539a564b60eabb4186c5ea471b932a4d2006319654d40a533cc77b659122ef
-
SHA512
87b0101c44792c2bd32841cba5e085d1d35617af1f7e9c2507974f9498106e1924fd27a9cab08440ee4e5bed85777bb16da9d2493d159a7d0ee8dad5599ed248
-
SSDEEP
6144:rbVszMmDm73Sf5wvcYm2sQ2xKYvjdBEHMm7DOe9HRGR4EFktwOmCJEuGG0:rbV0Mmb5wh1sQE9jjE6JeEkWG
Malware Config
Signatures
Files
-
50539a564b60eabb4186c5ea471b932a4d2006319654d40a533cc77b659122ef.exe windows x86
dd8cf41a8b0c0355a9c035304c69f868
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
SuspendThread
GetFileAttributesA
GlobalFree
GetCurrentThreadId
HeapDestroy
GetModuleFileNameA
GetProcessTimes
GetPrivateProfileStringW
CreateMailslotA
GetPriorityClass
EnterCriticalSection
GetModuleHandleA
HeapCreate
DeleteAtom
ReadFile
FindAtomA
CloseHandle
GetCurrentProcessId
DeleteFileA
user32
GetWindowInfo
GetKeyboardType
SetFocus
GetClassInfoA
GetKeyState
GetClientRect
GetSysColor
DispatchMessageA
CallWindowProcW
IsWindow
DispatchMessageA
GetWindowLongA
DrawTextW
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 478KB - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ