Static task
static1
Behavioral task
behavioral1
Sample
fe50259e65a25cf2965081f7e781d8d68eac81d93e7f4e07201f51f6e4e7bd59.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe50259e65a25cf2965081f7e781d8d68eac81d93e7f4e07201f51f6e4e7bd59.exe
Resource
win10v2004-20221111-en
General
-
Target
fe50259e65a25cf2965081f7e781d8d68eac81d93e7f4e07201f51f6e4e7bd59
-
Size
106KB
-
MD5
3a0e6350592402ae68fe27a0ed578241
-
SHA1
b1492147e94aaf913945b0fdd6ffb22af7ef4db2
-
SHA256
fe50259e65a25cf2965081f7e781d8d68eac81d93e7f4e07201f51f6e4e7bd59
-
SHA512
18235308fa4e006123a9722731cf6e443b966d603efba38b69055cd83268c26dd87625f68034de6db03445fdff3d6f146c96e75f3dcce7dfb376b08166e5a1a1
-
SSDEEP
3072:Ay4zkSxoVQ9r0Uu/8Ov1kJZ5JJ3FA0cT7:A3oVQ9ry/v1yJdc
Malware Config
Signatures
Files
-
fe50259e65a25cf2965081f7e781d8d68eac81d93e7f4e07201f51f6e4e7bd59.exe windows x86
7f30d05e6c43b609cc630a68551d8c22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WritePrivateProfileStringA
InterlockedIncrement
GetModuleHandleA
VirtualProtect
SetHandleCount
lstrcpynA
InterlockedDecrement
SetUnhandledExceptionFilter
GetStartupInfoA
GetSystemTimeAsFileTime
GetDiskFreeSpaceA
CompareFileTime
ExpandEnvironmentStringsA
GetVersionExW
user32
GetCapture
SystemParametersInfoA
SetScrollRange
GetClassNameA
SetScrollPos
GetMenu
MessageBoxA
GetSysColor
msvcrt
__getmainargs
signal
__p__commode
sqrt
_utime
__p__fmode
_lseeki64
atol
__p__environ
_umask
atof
memcpy
malloc
fgets
__set_app_type
_acmdln
fputs
floor
_XcptFilter
exit
_errno
_initterm
__setusermatherr
_adjust_fdiv
isleadbyte
_except_handler3
shell32
ExtractIconExA
SHGetFileInfo
ShellExecuteEx
ExtractIconA
SHGetPathFromIDListW
SHGetFolderPathA
DragAcceptFiles
oleaut32
LoadTypeLib
SysAllocStringByteLen
SafeArrayCreate
SysFreeString
SafeArrayRedim
VariantInit
SysAllocStringLen
SafeArrayGetUBound
ole32
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CoTaskMemFree
IsEqualGUID
CoSetProxyBlanket
CreateILockBytesOnHGlobal
CoDisconnectObject
DoDragDrop
RegisterDragDrop
comctl32
CreateToolbarEx
ImageList_AddMasked
ImageList_GetImageCount
CreateStatusWindowA
ImageList_DragEnter
ImageList_Destroy
PropertySheetW
CreatePropertySheetPageW
ImageList_DragShowNolock
advapi32
CheckTokenMembership
RegQueryValueExA
CryptDestroyHash
RegQueryInfoKeyA
CryptReleaseContext
RegFlushKey
InitializeAcl
RegDeleteKeyW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ