Static task
static1
Behavioral task
behavioral1
Sample
73a0634d501d4997f65898955cd886ea374322b9f4ed4f1c1ee1c8b4f843543c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73a0634d501d4997f65898955cd886ea374322b9f4ed4f1c1ee1c8b4f843543c.exe
Resource
win10v2004-20220812-en
General
-
Target
73a0634d501d4997f65898955cd886ea374322b9f4ed4f1c1ee1c8b4f843543c
-
Size
311KB
-
MD5
42fed410fcd05794af1c729202ccd0f0
-
SHA1
647970604cc7c0160adb2146c4b7dc35733718f4
-
SHA256
73a0634d501d4997f65898955cd886ea374322b9f4ed4f1c1ee1c8b4f843543c
-
SHA512
ed4b89efa04fa1e03135673ca5026fc988069b969a44440d2efde2b4870d0badca7fb6f90d33fcf6c9bef9f53c00c3fccc9a69bca4c18805b19472c496fb0432
-
SSDEEP
6144:tcAYMRrLnCsXI1sQuAfCnUa4P06oh7UISnomlZ2ZZn41pa1YPZJ:GAZYsXI1sQuAfCP4PzohUISVf2ZZQom
Malware Config
Signatures
Files
-
73a0634d501d4997f65898955cd886ea374322b9f4ed4f1c1ee1c8b4f843543c.exe windows x86
a8d0fe2b773aa604965a45e01b83aa28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
GetStringTypeA
GlobalLock
GetStdHandle
HeapFree
CloseHandle
GetPrivateProfileSectionA
RemoveDirectoryW
VirtualProtectEx
GetFileAttributesW
GetFileAttributesW
GetVersionExA
GetCurrentThread
GetPrivateProfileIntA
LocalFlags
GetCurrentProcess
GetModuleHandleA
DeviceIoControl
SetLastError
FindClose
CreateEventA
shell32
SHGetSettings
SHGetMalloc
StrChrA
SHGetDiskFreeSpaceA
DragFinish
SHFree
ShellAboutA
DragQueryFileA
DragAcceptFiles
DuplicateIcon
DllUnregisterServer
ExtractIconA
ShellMessageBoxA
ntmarta
AccGetExplicitEntries
AccFreeIndexArray
AccConvertSDToAccess
AccConvertAclToAccess
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ