Static task
static1
Behavioral task
behavioral1
Sample
50e34ded5b16516702a02b8f4ea101730b30db130e32b86abf586faec894a690.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
50e34ded5b16516702a02b8f4ea101730b30db130e32b86abf586faec894a690.exe
Resource
win10v2004-20220901-en
General
-
Target
50e34ded5b16516702a02b8f4ea101730b30db130e32b86abf586faec894a690
-
Size
80KB
-
MD5
49e2c6112848d79ab9cfd72a92c4d680
-
SHA1
d921e0a47e20b2210298d0e73348006d00084dcd
-
SHA256
50e34ded5b16516702a02b8f4ea101730b30db130e32b86abf586faec894a690
-
SHA512
f561ff5a91bffb8bc14fd8adfb8203eafc3ebf073a724c0fb50493027ab21194c39eef97b706a3f6dde6fd760a7428322c25c8d8650b7ef63072cc958f0565f5
-
SSDEEP
1536:8F3n8YK7c1iVccWGOvb0g3zrbNqqCsJycqbqzk6x:8F3gY1jG2T3zrMbJY
Malware Config
Signatures
Files
-
50e34ded5b16516702a02b8f4ea101730b30db130e32b86abf586faec894a690.exe windows x86
4198a04e545fa481168497b26f933dcc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
OpenEventA
CreateEventA
CreateThread
SetEvent
GlobalFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
TerminateProcess
GlobalUnlock
WriteFile
CreateFileA
GlobalLock
GlobalAlloc
Sleep
GetTickCount
ExitProcess
RtlUnwind
lstrcmpA
user32
GetSystemMetrics
wsprintfA
ReleaseDC
MessageBoxA
GetClientRect
GetDC
gdi32
GetDIBits
GetObjectA
BitBlt
SelectObject
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
CreateCompatibleDC
DeleteObject
winmm
timeSetEvent
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ