Static task
static1
Behavioral task
behavioral1
Sample
73f2f08c21a06f97c9ca36e1209f2e46460f921d7f52bee03cb9987895f4c7fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73f2f08c21a06f97c9ca36e1209f2e46460f921d7f52bee03cb9987895f4c7fa.exe
Resource
win10v2004-20220812-en
General
-
Target
73f2f08c21a06f97c9ca36e1209f2e46460f921d7f52bee03cb9987895f4c7fa
-
Size
449KB
-
MD5
1d52e86de9af18fbeb5c050df0aca749
-
SHA1
2b001b36b6e6c3ebb30f0616bb118cc189750b65
-
SHA256
73f2f08c21a06f97c9ca36e1209f2e46460f921d7f52bee03cb9987895f4c7fa
-
SHA512
543f03c64fd62c268d08265b0633b856ea23132bf55f22168541a735a86bf8a69ce3b3a51b3a01ac6065f9194f041aeb8e6408bd0d8e547fcdd72959aa1efad7
-
SSDEEP
12288:icqhd/EZ/ChZ/LxJT1nnNGeF24uB/gJZwfDqjFgA:icqEp0pLX1MenuZNWj
Malware Config
Signatures
Files
-
73f2f08c21a06f97c9ca36e1209f2e46460f921d7f52bee03cb9987895f4c7fa.exe windows x86
8b7d5ce294eb71583f595f1103bba545
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
UnhandledExceptionFilter
GetEnvironmentStrings
GetTempPathW
SetHandleCount
DeleteCriticalSection
HeapAlloc
LoadLibraryA
GetCommandLineA
HeapDestroy
WriteConsoleOutputA
LocalSize
SetLocaleInfoA
GetLastError
InterlockedExchange
GetTickCount
GetEnvironmentStringsW
TlsFree
TlsGetValue
GetComputerNameA
HeapCreate
GetStdHandle
TlsSetValue
GetVersion
GlobalFindAtomA
VirtualFree
LeaveCriticalSection
TlsAlloc
GetProcAddress
FreeEnvironmentStringsA
SetLastError
HeapFree
GetEnvironmentVariableW
GetStartupInfoW
SetCriticalSectionSpinCount
GetStartupInfoA
VirtualQuery
GetCommandLineW
IsBadWritePtr
GetSystemTimeAsFileTime
GetFileType
GetCurrentProcessId
FreeEnvironmentStringsW
MultiByteToWideChar
HeapReAlloc
WriteFile
ExitProcess
EnterCriticalSection
LoadResource
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
GetModuleFileNameW
GetModuleHandleA
InitializeCriticalSection
GetModuleFileNameA
GetDriveTypeA
GetCurrentThreadId
RtlUnwind
wininet
FindNextUrlCacheGroup
SetUrlCacheEntryGroupA
InternetInitializeAutoProxyDll
FtpSetCurrentDirectoryA
ShowSecurityInfo
InternetSetOptionExW
InternetSetFilePointer
shell32
ShellExecuteEx
SHGetPathFromIDList
DragAcceptFiles
ShellAboutA
SHGetInstanceExplorer
RealShellExecuteW
DragQueryFileAorW
SheChangeDirExW
SHEmptyRecycleBinW
comdlg32
ChooseColorW
GetOpenFileNameA
PrintDlgA
ChooseFontW
GetSaveFileNameA
FindTextA
GetFileTitleW
LoadAlterBitmap
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ