Static task
static1
Behavioral task
behavioral1
Sample
0a72173cf92c17b03cc650450650498096866a664750526b093feb3a0adfc7ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a72173cf92c17b03cc650450650498096866a664750526b093feb3a0adfc7ad.exe
Resource
win10v2004-20220812-en
General
-
Target
0a72173cf92c17b03cc650450650498096866a664750526b093feb3a0adfc7ad
-
Size
144KB
-
MD5
20b1c5bcbb9598d68d778a4c5eddd620
-
SHA1
ad03934c5eeda11e93de5ba299c8322f4e44c885
-
SHA256
0a72173cf92c17b03cc650450650498096866a664750526b093feb3a0adfc7ad
-
SHA512
a473607f68a908b8174b214417a7026c02564de8b6f12979a044744c6c00a4cf58319d4a4d759c6de53ff830f46585828e6636dc8becfccf8f7a9f9bd6099e74
-
SSDEEP
3072:MHuG6Xkuwh2ntk2LzSV0aKs+cEBbcJYixDbNSxYi4XIpXuoNw:MOGGS2ntkY1Ac4Dbf4pXuoK
Malware Config
Signatures
Files
-
0a72173cf92c17b03cc650450650498096866a664750526b093feb3a0adfc7ad.exe windows x86
3d289df6b9c7102d3e84d76e331f7894
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
lstrlenA
LoadLibraryA
crtdll
__GetMainArgs
exit
raise
signal
ntdll
NtWaitForSingleObject
wininet
InternetQueryOptionA
gdi32
SetPixel
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetDeviceCaps
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
LoadIconA
LoadStringA
SendMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
DispatchMessageA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 338B - Virtual size: 338B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ