Static task
static1
Behavioral task
behavioral1
Sample
72b1b5e231bbf10433ebc23fe427800ecc7ac3d2f0a3472681534b0da34fc9e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72b1b5e231bbf10433ebc23fe427800ecc7ac3d2f0a3472681534b0da34fc9e7.exe
Resource
win10v2004-20220812-en
General
-
Target
72b1b5e231bbf10433ebc23fe427800ecc7ac3d2f0a3472681534b0da34fc9e7
-
Size
148KB
-
MD5
a1aa24c2abd3b7092c036e75915491a0
-
SHA1
69ebbabf6f98952619c56d19d464be6a30bf8128
-
SHA256
72b1b5e231bbf10433ebc23fe427800ecc7ac3d2f0a3472681534b0da34fc9e7
-
SHA512
2aa5d7e916af40e7a73cf62120ef25d6b1d9f27d3dafd29d6d749bf83c554703be82db288a66d78be07bb3d96c094fa8b45e417e1a04b6b18af1bcfdef181a59
-
SSDEEP
3072:iJd2bn0Rw7FNGLixt3beIvfcyU5WJIqF:c2b0cHjPvLWqF
Malware Config
Signatures
Files
-
72b1b5e231bbf10433ebc23fe427800ecc7ac3d2f0a3472681534b0da34fc9e7.exe windows x86
074428f6332775eb793071c21e71b606
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
QueryPerformanceCounter
GetStartupInfoW
CompareFileTime
GetCurrentThread
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
GetCurrentThreadId
VirtualAlloc
GetStringTypeW
FreeLibrary
FindClose
ReadFile
FreeEnvironmentStringsW
lstrlenA
HeapAlloc
FormatMessageW
LoadLibraryW
GetFileAttributesW
GetModuleFileNameA
SetEndOfFile
MultiByteToWideChar
GetEnvironmentStringsW
InterlockedCompareExchange
TlsFree
EnterCriticalSection
SetErrorMode
HeapSize
lstrlenW
GetCommandLineW
GetModuleHandleW
HeapFree
WriteFile
SetFilePointer
LoadResource
CreateEventW
GlobalAlloc
GetOEMCP
GetVersionExW
SetHandleCount
DeleteCriticalSection
LCMapStringW
LoadLibraryExW
SetLastError
ExitProcess
GetSystemInfo
HeapDestroy
InterlockedExchange
LoadLibraryA
FindFirstFileW
CreateFileA
LocalAlloc
LeaveCriticalSection
InitializeCriticalSection
HeapCreate
LocalFree
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
IsValidCodePage
GetVersionExA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLastError
GetCommandLineA
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
Sleep
GetCPInfo
GetACP
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
user32
GetSystemMetrics
msi
ord50
shell32
SHFileOperationW
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ