Static task
static1
Behavioral task
behavioral1
Sample
c50f952830c24666961f2f6b96c46fd55bf1c04d47839ba66d7b0b2218bceba5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c50f952830c24666961f2f6b96c46fd55bf1c04d47839ba66d7b0b2218bceba5.exe
Resource
win10v2004-20221111-en
General
-
Target
c50f952830c24666961f2f6b96c46fd55bf1c04d47839ba66d7b0b2218bceba5
-
Size
20KB
-
MD5
9dad8d9afa73c350e24ae907766f4baa
-
SHA1
db8cf9b7ca1fc13c6dc222a1fba10521ee7d739a
-
SHA256
c50f952830c24666961f2f6b96c46fd55bf1c04d47839ba66d7b0b2218bceba5
-
SHA512
f2bdf50aee55d7913692441039b6739ff68ddd374e62aa79071a02dc5a4c4d752c8e42dfcdd9264b87b105dafd402ec7d54cce96d09d408704090ba281b9741e
-
SSDEEP
192:U5HY4Hj0jMlu5burlRy0ZhygTvXco/5d6qYqbz/ftIQ+hI/njrfLrgR:av8SrlFZh7TvXbT9z/f6xIrrfLMR
Malware Config
Signatures
Files
-
c50f952830c24666961f2f6b96c46fd55bf1c04d47839ba66d7b0b2218bceba5.exe windows x86
64fada82928e676a63e206f2cfb3811f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
mciSendStringA
wsock32
recv
send
WSAStartup
socket
htons
bind
listen
accept
WSACleanup
advapi32
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
gdi32
GetPixel
SetPixel
kernel32
AddAtomA
Beep
CopyFileA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetSystemDirectoryA
GetTickCount
SetUnhandledExceptionFilter
Sleep
TerminateThread
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fgets
fopen
fprintf
fputs
free
fwrite
malloc
memcpy
memset
rand
signal
srand
strlen
shell32
ShellExecuteA
user32
BlockInput
FindWindowA
GetAsyncKeyState
GetSystemMetrics
GetWindowDC
MessageBoxA
PostMessageA
SendMessageA
SetCursorPos
SwapMouseButton
keybd_event
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 272B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE