Static task
static1
Behavioral task
behavioral1
Sample
73965dd492604a7dc35a0a7e5dd0aa8233bc369061484f2e4e344f6e082c31af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73965dd492604a7dc35a0a7e5dd0aa8233bc369061484f2e4e344f6e082c31af.exe
Resource
win10v2004-20220812-en
General
-
Target
73965dd492604a7dc35a0a7e5dd0aa8233bc369061484f2e4e344f6e082c31af
-
Size
249KB
-
MD5
71b30242504ddc7ec4d8d67713a4b150
-
SHA1
bdc0fe20195acb3dd97d96db14fef0ddbce4091d
-
SHA256
73965dd492604a7dc35a0a7e5dd0aa8233bc369061484f2e4e344f6e082c31af
-
SHA512
1771665cd3fc6249cc122031ea2303e995e980a84c9ebe5832240c3a46a39b62c777b240dc2278ec502f78ff06eda69940b9f35180189406ca83c1d63aee48e6
-
SSDEEP
6144:J4lB3CQOuE8cQ4j9VyCDUKb+9kI1UUugPdKz1Ko:6/OuE8cD9bAKy91UJh
Malware Config
Signatures
Files
-
73965dd492604a7dc35a0a7e5dd0aa8233bc369061484f2e4e344f6e082c31af.exe windows x86
d6dcee5f5c4c80e9120cbb21d5b61609
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesW
PostQueuedCompletionStatus
GetCurrentProcessId
ExitProcess
IsBadStringPtrW
FindAtomW
lstrcmpA
GetLastError
CreateEventA
VirtualAlloc
GetFileSizeEx
RemoveDirectoryA
GetConsoleOutputCP
FindResourceExA
GetNumberOfConsoleInputEvents
FreeLibrary
GetCurrentThreadId
CreateConsoleScreenBuffer
CloseHandle
GetVersion
GetEnvironmentStrings
Sleep
WaitForMultipleObjectsEx
FindAtomA
HeapReAlloc
WriteProfileSectionA
SetEnvironmentVariableA
CreateMailslotW
msasn1
ASN1intx_free
ASN1BERDecObjectIdentifier
ASN1_CreateModule
ASN1BERDecObjectIdentifier2
ASN1BEREncUTF8String
ole32
OleSetClipboard
RevokeDragDrop
OleMetafilePictFromIconAndLabel
CoSwitchCallContext
StgPropertyLengthAsVariant
OleCreateFromData
CoReleaseServerProcess
CreateBindCtx
CoInitializeWOW
OleUninitialize
CoIsOle1Class
OleRegGetUserType
CoMarshalInterface
OleLockRunning
StgCreatePropStg
CoGetStdMarshalEx
OleDuplicateData
CoGetInterfaceAndReleaseStream
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: 512B - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 83KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 77KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ