Static task
static1
Behavioral task
behavioral1
Sample
0a73d8b86bd6320887c7eabc8019e78eaaee40774153200e065adea83954aefc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a73d8b86bd6320887c7eabc8019e78eaaee40774153200e065adea83954aefc.exe
Resource
win10v2004-20221111-en
General
-
Target
0a73d8b86bd6320887c7eabc8019e78eaaee40774153200e065adea83954aefc
-
Size
173KB
-
MD5
124641c717df694ba4bfd5019285c315
-
SHA1
8663d24f81c73d62c617cb4219939722cf370f64
-
SHA256
0a73d8b86bd6320887c7eabc8019e78eaaee40774153200e065adea83954aefc
-
SHA512
12917502dc97300535adf3d7a6ca92ff50f986122191561986c80e6e1174cb083a5427750da82a2d428d364bf4a360884eec6287f6eb4846e4464d5e90c5649e
-
SSDEEP
3072:X7zQq5wxu+hte/e2Wp7a/GiknYABeakmgrc9N:BQOOm+i9ABeiFN
Malware Config
Signatures
Files
-
0a73d8b86bd6320887c7eabc8019e78eaaee40774153200e065adea83954aefc.exe windows x86
68da36c705041bcb516a1b6caabad0aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetEvent
GetVersionExW
CreateEventW
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleFileNameA
FreeLibrary
GetSystemDirectoryW
LoadLibraryW
GetTickCount
OpenMutexA
GetCurrentProcessId
CreateMutexW
SetFilePointer
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
WriteFile
CreateFileW
GetLocalTime
GetCurrentThreadId
ReleaseMutex
GetCurrentProcess
GetCommandLineW
FlushFileBuffers
CreateFileA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
Sleep
HeapSize
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualQuery
user32
PeekMessageW
MsgWaitForMultipleObjectsEx
DispatchMessageW
TranslateMessage
shell32
ShellExecuteExW
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE