Static task
static1
Behavioral task
behavioral1
Sample
73e837f588a730842d6970fe619ebeb556f28e2bd613c01ee00f428b86cfd6b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73e837f588a730842d6970fe619ebeb556f28e2bd613c01ee00f428b86cfd6b6.exe
Resource
win10v2004-20220812-en
General
-
Target
73e837f588a730842d6970fe619ebeb556f28e2bd613c01ee00f428b86cfd6b6
-
Size
110KB
-
MD5
6518434f0dac671182c23f8d7d26a120
-
SHA1
0d671cd473ecfe7d7c5f23f719d4b5e2923924d2
-
SHA256
73e837f588a730842d6970fe619ebeb556f28e2bd613c01ee00f428b86cfd6b6
-
SHA512
dc75af19e957c5bc49818c63f0fafe562c7c853c4db4b97a5c7e5c1fb7ff68550ded4cb79e8ddf4d0e60d0e1619d0698030299997af458e38a1ad77ece5c06b3
-
SSDEEP
1536:vC2CyQ2MwGVYtoouPVpirTUZeh3NY5vSbgTulKKTK349aHLMehq+t3U0f2I2vu:62SVPoeVsTUMJO5lZofggGr31ufu
Malware Config
Signatures
Files
-
73e837f588a730842d6970fe619ebeb556f28e2bd613c01ee00f428b86cfd6b6.exe windows x86
916dfb061a0620a4128dd2871d86634e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_exit
sinh
strrchr
strstr
_initterm
_controlfp
__p__commode
_except_handler3
__p___initenv
__getmainargs
__p__fmode
strncpy
_snprintf
_cexit
free
strcpy
_iob
calloc
exit
_XcptFilter
abort
sprintf
memset
__set_app_type
__setusermatherr
_adjust_fdiv
fputc
comdlg32
GetOpenFileNameA
kernel32
GetThreadLocale
MoveFileA
GetVersion
GetExitCodeProcess
GetDateFormatA
GetWindowsDirectoryA
GetStdHandle
GetFileTime
VirtualFree
GetNumberFormatA
GetCurrentThreadId
GetFullPathNameA
SetHandleCount
DeviceIoControl
user32
GetWindowTextA
SetScrollRange
GetMenu
SetDlgItemTextA
GetFocus
RemoveMenu
WinHelpA
GetLastActivePopup
SetScrollPos
MapWindowPoints
GetSystemMenu
DrawIconEx
ScreenToClient
GetTopWindow
GetScrollInfo
WindowFromPoint
advapi32
RevertToSelf
RegEnumValueW
RegQueryValueExA
AdjustTokenPrivileges
RegQueryValueA
CryptAcquireContextA
CheckTokenMembership
CloseServiceHandle
CryptReleaseContext
RegCreateKeyExA
RegQueryInfoKeyW
ole32
GetRunningObjectTable
CoRegisterClassObject
OleDraw
CoInitialize
CreateILockBytesOnHGlobal
CoGetClassObject
RegisterDragDrop
CLSIDFromProgID
CoRevokeClassObject
gdi32
DeleteEnhMetaFile
SetPolyFillMode
CloseMetaFile
GetObjectW
CopyMetaFileW
BitBlt
CreatePen
SetTextJustification
GetSystemPaletteEntries
RectVisible
GetStockObject
GetCurrentPositionEx
TextOutA
GetPixel
GetTextAlign
comctl32
CreateStatusWindowA
ImageList_DragShowNolock
ImageList_LoadImageW
ImageList_BeginDrag
InitializeFlatSB
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_SetBkColor
ImageList_SetOverlayImage
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE