Static task
static1
Behavioral task
behavioral1
Sample
73e2bd002388eacaa174f0892de6dd8df22d3bef7de3c654be4aeceb4da463b8.exe
Resource
win7-20220812-en
General
-
Target
73e2bd002388eacaa174f0892de6dd8df22d3bef7de3c654be4aeceb4da463b8
-
Size
519KB
-
MD5
1304ac0510e49c943666ef85a1ba40e0
-
SHA1
73c1e69bc995e79b5104764127595a89c19820af
-
SHA256
73e2bd002388eacaa174f0892de6dd8df22d3bef7de3c654be4aeceb4da463b8
-
SHA512
554b77d6f301c26fd6c936a3d7588cfd2f29c611d50dad3ff4806d91831301b5595722035adb61065e0edad0987b4d03183c4a68214b8c80ddbe08d7e7b72b6d
-
SSDEEP
12288:yA5JGw0P48k+hSJ/JtaaYDX2QEaYDX2QOGpyVoZ:xpg48phSlJtoXDKXDOGcaZ
Malware Config
Signatures
Files
-
73e2bd002388eacaa174f0892de6dd8df22d3bef7de3c654be4aeceb4da463b8.exe windows x86
c0d4f083fa62db67fb705b643a601dbf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
WideCharToMultiByte
GetLastError
CreateThread
WaitForMultipleObjects
GetExitCodeThread
ResumeThread
SetEvent
TerminateThread
LoadLibraryW
GetProcAddress
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
CreateFileW
Sleep
lstrlenA
MultiByteToWideChar
GetFileAttributesW
DeleteFileW
GetModuleFileNameW
LocalAlloc
LocalFree
GetModuleHandleW
FreeLibrary
GetCommandLineW
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
CreateEventW
InitializeCriticalSection
DeleteCriticalSection
GetPrivateProfileIntW
GetWindowsDirectoryW
GetTickCount
WaitForSingleObject
ResetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
SetFileTime
CreateFileA
SystemTimeToFileTime
DeleteFileA
SetEndOfFile
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetSystemTimeAsFileTime
MoveFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
VirtualAlloc
SetFilePointer
ReadFile
FlushFileBuffers
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
advapi32
InitializeSecurityDescriptor
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
SHChangeNotify
CommandLineToArgvW
SHGetFolderPathW
ole32
CoInitializeEx
CoCreateInstance
shlwapi
PathFileExistsW
PathRemoveArgsW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
wininet
InternetSetOptionExA
InternetCloseHandle
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
Sections
.text Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE