Static task
static1
Behavioral task
behavioral1
Sample
c73b458f21f1a64de44ed7a83a5d14d979114360b95d6b101dc94077be0c5e5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c73b458f21f1a64de44ed7a83a5d14d979114360b95d6b101dc94077be0c5e5f.exe
Resource
win10v2004-20220901-en
General
-
Target
c73b458f21f1a64de44ed7a83a5d14d979114360b95d6b101dc94077be0c5e5f
-
Size
264KB
-
MD5
90fc32cf04ad1e7cdaedece0f681f970
-
SHA1
ee2ce4705ee2a445b840611be8ce9884f67f939a
-
SHA256
c73b458f21f1a64de44ed7a83a5d14d979114360b95d6b101dc94077be0c5e5f
-
SHA512
19536984098b024bcafc435f734f0c5fe45c6e688efb94ca4adae220a644d3fc56ebbb813700a350bbb6dea3b223c318bcb1dd7114797167fe0d3650e7f8ea97
-
SSDEEP
6144:57Hf9BY286IgpP6fOkJjF3WsUcj2pROppCgNDDh+:/C+LpSFJd5v2SpN/h+
Malware Config
Signatures
Files
-
c73b458f21f1a64de44ed7a83a5d14d979114360b95d6b101dc94077be0c5e5f.exe windows x86
a3b0076cb8f2ed31df0e26e0749feb41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameW
VirtualAlloc
lstrcpyn
FindAtomW
GlobalFindAtomW
RemoveDirectoryA
IsBadStringPtrW
AddAtomA
ReadDirectoryChangesW
GetAtomNameW
GetSystemDirectoryW
WinExec
DeleteAtom
LocalFree
GetProcessHeaps
GetVolumeInformationA
lstrlen
DuplicateHandle
GetModuleHandleA
FindResourceA
GetTimeFormatA
GetShortPathNameA
GetTempFileNameA
EnumCalendarInfoW
GetCalendarInfoA
GetExitCodeThread
OpenWaitableTimerA
user32
DialogBoxParamW
CreateDialogIndirectParamA
SetWindowPos
RemoveMenu
GetMenu
GetMenuStringW
GetDlgItemTextW
GetMenuItemID
InvalidateRect
CharPrevW
GetDlgItemTextA
wsprintfW
wsprintfA
MessageBoxW
CreateWindowExW
LoadIconW
GetIconInfo
PostMessageA
GetMenuInfo
SetWindowTextW
GetMenuStringA
GetForegroundWindow
CheckMenuItem
EnableWindow
RegisterClassA
GetClassInfoExA
RegisterClassExA
TrackPopupMenu
ShowWindow
wvsprintfW
GetWindowRgn
CreateMenu
MonitorFromRect
GetKeyboardType
GetDesktopWindow
DefWindowProcW
keymgr
DllMain
CPlApplet
PRShowRestoreWizardExW
PRShowSaveWizardExW
PRShowRestoreFromMsginaW
PRShowRestoreWizardW
KRShowKeyMgr
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ