Static task
static1
Behavioral task
behavioral1
Sample
73ed7e71f8616b09eab698b9b91a4d63e455bbc75c2a6bddeed07ef376e9b711.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73ed7e71f8616b09eab698b9b91a4d63e455bbc75c2a6bddeed07ef376e9b711.exe
Resource
win10v2004-20220812-en
General
-
Target
73ed7e71f8616b09eab698b9b91a4d63e455bbc75c2a6bddeed07ef376e9b711
-
Size
40KB
-
MD5
ee99e7cfaf2ce048d35700ce8bb7489c
-
SHA1
ec3c649a820d7abc57a487a8e5986b437176a161
-
SHA256
73ed7e71f8616b09eab698b9b91a4d63e455bbc75c2a6bddeed07ef376e9b711
-
SHA512
126a839f6d762f995da545c5e32d2924008455eee61587f12569ed5e1259617e26c9dcf9a8eb9ad56233192712e2c3c44f8358b512991c17b507790e33d3df56
-
SSDEEP
384:lP3MVBIV2mDmqOs3zrcerMomlAtO4nA/ckZnyXFtlE3+HtmRrosZO:lPwmVZLzAmOxkMn0FtlEQmJoOO
Malware Config
Signatures
Files
-
73ed7e71f8616b09eab698b9b91a4d63e455bbc75c2a6bddeed07ef376e9b711.exe windows x86
be78f7e7efe2db626c15fb023f626cec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileSize
DeleteFileA
SetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
WaitForSingleObject
CreateProcessA
UnlockFile
LockFile
SetFilePointer
GetCurrentDirectoryA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CloseHandle
GetLastError
GetCurrentProcess
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
ReadFile
GetSystemDirectoryA
GetDriveTypeA
WriteFile
GetModuleHandleA
GetModuleFileNameA
Sleep
CopyFileA
HeapFree
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
ExitWindowsEx
GetClassNameA
SendMessageA
GetTopWindow
GetWindowTextA
GetWindow
advapi32
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ