Static task
static1
Behavioral task
behavioral1
Sample
50cc1e6326b9675bac32bab3d1eaf98f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50cc1e6326b9675bac32bab3d1eaf98f.exe
Resource
win10v2004-20231215-en
General
-
Target
50cc1e6326b9675bac32bab3d1eaf98f
-
Size
65KB
-
MD5
50cc1e6326b9675bac32bab3d1eaf98f
-
SHA1
7352d3897e6d9c7991cb5b18f252f8d233e328b2
-
SHA256
36185813fc63e504821d0aa8538b9c0756d077bca71d52b1ad47a4d252913deb
-
SHA512
6e5cfb649dab73ad75c4fd8cc998ec3e01226083e6f7fd0e1cb1d93e6a43cb6c32f54f9684dd0bd9adfa4080a285087c0e5783ba2362454c5791218bda1f31c9
-
SSDEEP
768:1fR895vQgDYJa2Vz16ipD/Kf/W5jRxv8m5zpD/fd3jEFaq0WOH0uO3jPpxwb+kjE:1fR8PvYs+zXp171QFL8H05LrMd7ford
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50cc1e6326b9675bac32bab3d1eaf98f
Files
-
50cc1e6326b9675bac32bab3d1eaf98f.exe windows:4 windows x86 arch:x86
c4d879d63ac5a1c924bc45f68845bad5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FreeLibrary
GetTickCount
lstrcpyA
GetComputerNameA
ExitThread
Sleep
GetCurrentProcessId
SetFileAttributesA
GetModuleFileNameA
ReleaseMutex
OpenMutexA
CreateThread
GetTempPathA
WinExec
DeleteFileA
GetLastError
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GetStringTypeA
LCMapStringW
GetSystemDirectoryA
lstrcatA
GetFileSize
ReadFile
CloseHandle
IsBadReadPtr
GetSystemInfo
VirtualAlloc
VirtualFree
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualProtect
lstrcmpA
GetVersion
LCMapStringA
SetEnvironmentVariableA
GetStringTypeW
CompareStringW
CompareStringA
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetExitCodeProcess
IsBadCodePtr
IsBadWritePtr
SetUnhandledExceptionFilter
SetFilePointer
WriteFile
HeapCreate
HeapDestroy
GetVersionExA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetFileAttributesA
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
user32
wsprintfA
advapi32
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CreateServiceA
shell32
ShellExecuteA
msvcrt
??0exception@@QAE@ABV0@@Z
??1type_info@@UAE@XZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
ws2_32
WSAIoctl
inet_addr
gethostbyname
socket
setsockopt
connect
closesocket
WSAStartup
WSACleanup
send
sendto
htonl
WSASocketA
recv
__WSAFDIsSet
select
inet_ntoa
htons
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE