Static task
static1
Behavioral task
behavioral1
Sample
73b9f111a4b78d3abdccc28052361807920c446a7e32f9caaea8f62fade38767.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73b9f111a4b78d3abdccc28052361807920c446a7e32f9caaea8f62fade38767.exe
Resource
win10v2004-20220812-en
General
-
Target
73b9f111a4b78d3abdccc28052361807920c446a7e32f9caaea8f62fade38767
-
Size
208KB
-
MD5
42b61950fb012c67f33f80dfd03e04b2
-
SHA1
39af79128b718bf7d051eeb851a0274780f018c3
-
SHA256
73b9f111a4b78d3abdccc28052361807920c446a7e32f9caaea8f62fade38767
-
SHA512
78544162ad4533bb16cdd744d02c18127b27d1c8568c4aff79f935a39d54a9da5987434c083c520ef782510a3c2de680ce84978fad3a9399f54beb3381921bcf
-
SSDEEP
6144:naqTWfxlX5d1hWq5/PvOiqN6uKlQK/FAZ6e1luubb:Sd1hF5FmCJFZwfbb
Malware Config
Signatures
Files
-
73b9f111a4b78d3abdccc28052361807920c446a7e32f9caaea8f62fade38767.exe windows x86
1e52a31c34b207029d2155b79f99cf81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualFree
CreateFiber
RtlUnwind
HeapAlloc
InterlockedCompareExchange
ExitProcess
GetCommandLineA
GetLocaleInfoA
ResumeThread
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
HeapReAlloc
EnumResourceNamesA
LoadLibraryA
HeapDestroy
VirtualQuery
VirtualProtect
SetThreadPriority
UnhandledExceptionFilter
GetACP
GetProcAddress
GetSystemInfo
VirtualAlloc
HeapSize
TerminateProcess
WriteFile
user32
IsChild
GetKeyState
UnionRect
GetClientRect
SetFocus
PtInRect
InvalidateRect
IsWindow
RegisterClassExA
IntersectRect
BeginPaint
EndPaint
RealGetWindowClassA
GetFocus
UnregisterClassA
GetParent
CallWindowProcA
CreateWindowExA
setupapi
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ