Static task
static1
Behavioral task
behavioral1
Sample
73971964e40f1d2951873c7f048ba872f886abe4dbacf8357deef12133cb58e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73971964e40f1d2951873c7f048ba872f886abe4dbacf8357deef12133cb58e4.exe
Resource
win10v2004-20220901-en
General
-
Target
73971964e40f1d2951873c7f048ba872f886abe4dbacf8357deef12133cb58e4
-
Size
286KB
-
MD5
0450beb8b723b38be23cd65ffd4339b1
-
SHA1
1ca31b5412685c2c07c12b6ee1cb46d6da14d821
-
SHA256
73971964e40f1d2951873c7f048ba872f886abe4dbacf8357deef12133cb58e4
-
SHA512
7dc2625381f64fce29ab455e01288045582c709c10c6285ab5be090106d4955c41af8af23347300e30256f3c13f1a05bbc1e5159cd120ac0bbf2630ccf2a048c
-
SSDEEP
6144:ES+QO4XSSHHNxfdoL1PkF2bzPgciPe9EBXPp1MhEiVNC6tzmFimmx:ESDNlnLdoLN62ov8h1tzWQ
Malware Config
Signatures
Files
-
73971964e40f1d2951873c7f048ba872f886abe4dbacf8357deef12133cb58e4.exe windows x86
aecd1a6c394c36e58ddd598759a218ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetExitCodeProcess
Sleep
CloseHandle
VirtualProtect
GetStartupInfoA
CreateProcessA
CreateSemaphoreA
GetComputerNameA
TerminateProcess
SetFileAttributesA
CopyFileA
RemoveDirectoryA
ReleaseMutex
CreateMutexA
OutputDebugStringA
CreateDirectoryA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
ReadFile
ConvertDefaultLocale
TlsAlloc
GetFileTime
GetLastError
CreateFileA
SetFilePointer
GetACP
FindNextFileA
FindFirstFileA
lstrcmpA
GetCPInfo
GetShortPathNameA
ResumeThread
SetLastError
DuplicateHandle
GetCurrentProcess
CreatePipe
GetTickCount
WriteFile
LocalFree
GetConsoleAliasExesLengthW
FormatMessageA
DecodePointer
GetExitCodeThread
GetCurrentProcessId
GetSystemTime
GlobalAddAtomW
FileTimeToSystemTime
GetLogicalDrives
TerminateThread
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
GetTempPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetWindowsDirectoryA
GetFileSize
ExitProcess
ReleaseSemaphore
GetVersion
user32
GetMenuItemID
TrackPopupMenu
SetForegroundWindow
SetMenuDefaultItem
GetDlgItem
LoadIconA
SetTimer
EnumWindows
GetWindowTextA
ScreenToClient
LoadMenuA
GetForegroundWindow
GetSubMenu
GetCursorPos
PostMessageA
KillTimer
FindWindowA
EnableWindow
wvsprintfA
SendMessageA
GetWindowLongA
wsprintfA
SetWindowLongA
Sections
.text Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ