Static task
static1
Behavioral task
behavioral1
Sample
73dada95c763847e2582f0063c5512eb938b83247f1aefd4cd9062126d702c54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73dada95c763847e2582f0063c5512eb938b83247f1aefd4cd9062126d702c54.exe
Resource
win10v2004-20220812-en
General
-
Target
73dada95c763847e2582f0063c5512eb938b83247f1aefd4cd9062126d702c54
-
Size
748KB
-
MD5
d50d941191ae550c2a36650642e8fdee
-
SHA1
c48cc014caff9459e93403d8791efe900fb6033f
-
SHA256
73dada95c763847e2582f0063c5512eb938b83247f1aefd4cd9062126d702c54
-
SHA512
3fc2df552328087bb37d07b33bb3ff81e99a211744df4503589e3dc5e47ea9fa2dd9a8d3a763cfda411fa3059dfb8b8c8353b45fe30b3d4f72a9002bf49b778d
-
SSDEEP
12288:ql692t9lPrqTNpO1qKOhlOh71xzUq4DZmg4egQEWt7xCmvxBGznXXnFkcQIqk+9:qQGqO11OOPxzBSZhpgE7xC+xBGHnFaIU
Malware Config
Signatures
Files
-
73dada95c763847e2582f0063c5512eb938b83247f1aefd4cd9062126d702c54.exe windows x86
300b7d12a956e58dffcf9565689f1885
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetModuleFileNameA
WaitForMultipleObjects
lstrlenA
GetFileType
GetTickCount
CreateDirectoryA
CloseHandle
LocalSize
GetCurrentDirectoryW
FindVolumeClose
HeapCreate
WriteFile
GetFileAttributesA
HeapFree
CancelIo
GetModuleHandleA
GetFileTime
CreateSemaphoreA
FindClose
GetCommandLineA
GetDriveTypeA
FindVolumeClose
ExitThread
IsBadReadPtr
uxtheme
GetThemeColor
GetThemeEnumValue
DrawThemeEdge
CloseThemeData
DrawThemeBackground
GetWindowTheme
IsThemeActive
SetWindowTheme
GetThemeTextMetrics
OpenThemeData
CloseThemeData
GetThemeTextExtent
GetThemeBool
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE