Static task
static1
Behavioral task
behavioral1
Sample
973da4f304d8b8dff625c9ebf0af5bcc0ed9b5521acc4dc4962c0ce1fb0af1c0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
973da4f304d8b8dff625c9ebf0af5bcc0ed9b5521acc4dc4962c0ce1fb0af1c0.exe
Resource
win10v2004-20221111-en
General
-
Target
973da4f304d8b8dff625c9ebf0af5bcc0ed9b5521acc4dc4962c0ce1fb0af1c0
-
Size
72KB
-
MD5
5248ed9067c62256b74237d2a1b81c32
-
SHA1
7806114cc57885f4c2348a2ab472c51365bc4f52
-
SHA256
973da4f304d8b8dff625c9ebf0af5bcc0ed9b5521acc4dc4962c0ce1fb0af1c0
-
SHA512
0ef3af2af8879f72215f27252773fe49aa9ab809bd593569bd42e752287c4ac1c9281436756d60d55a18143dd5116176dd2fdeb85e77ea19d732a065b3daf0da
-
SSDEEP
768:SJG7V+MPyitv8WRpog9x7+rqrVjiyhN0HJEfrlLAYywfZLru3Pgc:SJGkMLtkYnxs8Z0HJkl8YywBu3P
Malware Config
Signatures
Files
-
973da4f304d8b8dff625c9ebf0af5bcc0ed9b5521acc4dc4962c0ce1fb0af1c0.exe windows x86
9e8c27206eb9cebb2f690076c9d4f4da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
HeapFree
FlushFileBuffers
HeapSize
SetStdHandle
WideCharToMultiByte
GetSystemDirectoryA
HeapReAlloc
GetSystemInfo
VirtualAlloc
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
VirtualQuery
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
CloseHandle
HeapAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
LoadLibraryA
RtlUnwind
InterlockedExchange
user32
MessageBoxA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
VariantClear
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ