Static task
static1
Behavioral task
behavioral1
Sample
73258dd5827eed49a23d0ab499fa8396cf706aa098616fa2259d190936c44f93.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
73258dd5827eed49a23d0ab499fa8396cf706aa098616fa2259d190936c44f93.exe
Resource
win10v2004-20220812-en
General
-
Target
73258dd5827eed49a23d0ab499fa8396cf706aa098616fa2259d190936c44f93
-
Size
2.2MB
-
MD5
e91d9d8c5a148ba740f08ac3bb80417b
-
SHA1
bf4290bf5d4f13abdc934a023c7224720f2b81d2
-
SHA256
73258dd5827eed49a23d0ab499fa8396cf706aa098616fa2259d190936c44f93
-
SHA512
78b95322a8bd083fe1190cc860f58561660fac6e426e8de9a32b4d39714cfc3b4f88212c3704610113c0c6f224031795b13b67b7494dac57c5a6293c386f0f0d
-
SSDEEP
49152:SK0p2QEdHwWhM7XLzfgRUTNrcQvMUFW1i7/OY1K1l7PkMVx4u5zjGiUQmqZPKjq:f0pnWHwIM7X/cUTNI3PiLFyIQ5XmqF
Malware Config
Signatures
Files
-
73258dd5827eed49a23d0ab499fa8396cf706aa098616fa2259d190936c44f93.exe windows x86
b783a8ccd25e34c0df91ed6d896c4874
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetOEMCP
GetDateFormatA
VirtualFree
GetTickCount
EnterCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStringsW
CreateMutexA
EnumSystemLocalesA
GetTimeFormatA
VirtualAlloc
GetStartupInfoA
OpenMutexA
TlsSetValue
GetCurrentProcessId
GetCommandLineA
FreeEnvironmentStringsW
GetStringTypeW
GetCurrentProcess
InterlockedDecrement
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetEnvironmentVariableW
GetVersionExA
GetCurrentThreadId
TerminateProcess
lstrcpyW
WriteConsoleA
lstrcmpA
LCMapStringA
LCMapStringW
IsDebuggerPresent
ExitProcess
MultiByteToWideChar
InterlockedIncrement
GetStdHandle
HeapDestroy
GetConsoleMode
WriteFile
TlsGetValue
SleepEx
Sleep
GetConsoleOutputCP
SetStdHandle
InterlockedExchange
GetFileType
VirtualQuery
SetUnhandledExceptionFilter
TlsFree
CloseHandle
GlobalGetAtomNameW
SetFilePointer
GetPrivateProfileSectionW
UnhandledExceptionFilter
FlushFileBuffers
GetLocaleInfoA
CreateFileA
HeapSize
GetProcessHeap
GetCurrentThread
WideCharToMultiByte
HeapCreate
GetModuleHandleA
WriteConsoleW
GetCPInfo
EnumDateFormatsW
HeapFree
ReadFile
LoadLibraryA
SetCurrentDirectoryA
HeapReAlloc
CompareStringW
LeaveCriticalSection
DeleteCriticalSection
GetProcAddress
SetHandleCount
GetStringTypeA
GetTimeZoneInformation
GetACP
CompareStringA
SetLastError
HeapAlloc
GetLocaleInfoW
SetConsoleCtrlHandler
GetLastError
GetUserDefaultLCID
IsValidLocale
RtlUnwind
GetCurrencyFormatA
IsValidCodePage
SetEnvironmentVariableA
TlsAlloc
GetConsoleCP
InitializeCriticalSection
GetModuleFileNameA
FreeLibrary
user32
DlgDirSelectExW
DestroyCursor
CascadeChildWindows
DdeQueryNextServer
GetCaretBlinkTime
SetFocus
LoadCursorW
CheckMenuItem
RegisterClassA
GetMenuContextHelpId
SetSystemCursor
GetNextDlgGroupItem
GetSysColor
RegisterClassExA
wsprintfW
EditWndProc
SetScrollRange
GetWindowContextHelpId
WindowFromDC
UnregisterClassA
DeferWindowPos
AnimateWindow
DdeSetQualityOfService
KillTimer
LoadBitmapA
GetDC
comctl32
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_SetDragCursorImage
CreateStatusWindowA
ImageList_BeginDrag
InitCommonControlsEx
ImageList_Copy
ImageList_AddIcon
ImageList_AddMasked
CreatePropertySheetPageA
ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_Replace
DestroyPropertySheetPage
GetEffectiveClientRect
CreateToolbarEx
ImageList_Write
ImageList_Draw
InitMUILanguage
CreateToolbar
ImageList_GetIconSize
CreateStatusWindow
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 254KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ