Static task
static1
Behavioral task
behavioral1
Sample
f50d007d4281df736e3e1e41258ded854a2d78732e49d6937110b21b7d89c5ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f50d007d4281df736e3e1e41258ded854a2d78732e49d6937110b21b7d89c5ff.exe
Resource
win10v2004-20220812-en
General
-
Target
f50d007d4281df736e3e1e41258ded854a2d78732e49d6937110b21b7d89c5ff
-
Size
284KB
-
MD5
d2d46ff7028564e3be710de6c56321fe
-
SHA1
92fc07af872518fe97b8a7e7fbe820988cd6046f
-
SHA256
f50d007d4281df736e3e1e41258ded854a2d78732e49d6937110b21b7d89c5ff
-
SHA512
0829c01f9e71cf5ac8700115188284db853577cafed165f944368bf0c3ab634286f5e011b1a40266faa3d0223edf9f5772cfaef5eb1d98affb725f60b0f1ac96
-
SSDEEP
6144:2oKQzhB9BH2UfAMFwLadpyDPJmlKLBD8Gy:TBJRwrUlKE
Malware Config
Signatures
Files
-
f50d007d4281df736e3e1e41258ded854a2d78732e49d6937110b21b7d89c5ff.exe windows x86
8fe73d2f6fc8f24742b4dcdf80f8fd27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
sdl
SDL_Delay
SDL_FillRect
SDL_Flip
SDL_FreeSurface
SDL_GetError
SDL_Init
SDL_MapRGB
SDL_PollEvent
SDL_Quit
SDL_SetModuleHandle
SDL_SetVideoMode
SDL_UpperBlit
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WaitEvent
SDL_strlcat
SDL_strlcpy
kernel32
AddAtomA
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
exit
fclose
fgetc
fgets
fopen
fprintf
fputc
free
freopen
fseek
ftell
malloc
memset
remove
setbuf
setvbuf
signal
strlen
strrchr
sdl_image
IMG_Load
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 768B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 51KB - Virtual size: 50KB
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 188KB - Virtual size: 187KB
IMAGE_SCN_MEM_DISCARDABLE