Static task
static1
Behavioral task
behavioral1
Sample
73886e42d9a9c1ace979adea173bc17d42f9dc84481757aa9840a7a18d283a5f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
73886e42d9a9c1ace979adea173bc17d42f9dc84481757aa9840a7a18d283a5f.exe
Resource
win10v2004-20220812-en
General
-
Target
73886e42d9a9c1ace979adea173bc17d42f9dc84481757aa9840a7a18d283a5f
-
Size
448KB
-
MD5
0839a99536224ee61e43fe65228a01cd
-
SHA1
1c0f5b26413eaabd26a59e7b59a36d0d672e2d4f
-
SHA256
73886e42d9a9c1ace979adea173bc17d42f9dc84481757aa9840a7a18d283a5f
-
SHA512
d48820a7258fb7b7d2eb631392865461db5405dbb687cd95802e2c8d9304e2e6678058d89812b3e2c8cb0e259cc974e2b192b3c2a580253f87bb9a8e3ef4e399
-
SSDEEP
12288:kiiyxSV+CgJS2WKOcz4T35LMeRk8ERqFsUX:BiyxSV+CMSeDml9sws
Malware Config
Signatures
Files
-
73886e42d9a9c1ace979adea173bc17d42f9dc84481757aa9840a7a18d283a5f.exe windows x86
5c6b1a5e6899b05ba6650453d22d6487
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalReAlloc
LocalFree
GetTempPathW
VirtualAlloc
GetProcAddress
GetTickCount
SetFirmwareEnvironmentVariableA
CreateMutexA
RemoveDirectoryW
LoadLibraryW
GetLastError
VirtualProtect
GetSystemInfo
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
RtlUnwind
GetCPInfo
GetOEMCP
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
LoadLibraryA
GetACP
VirtualQuery
user32
EnableWindow
ShowWindow
GetSystemMetrics
DdeSetQualityOfService
ImpersonateDdeClientWindow
SendMessageA
PostMessageA
PeekMessageA
winmm
midiInClose
midiDisconnect
Sections
.INIT Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ