Static task
static1
Behavioral task
behavioral1
Sample
73726860b4ba0f2d879b1b0659fb9a2a59002bd0a68ef3d88b86f6770efc37e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
73726860b4ba0f2d879b1b0659fb9a2a59002bd0a68ef3d88b86f6770efc37e5.exe
Resource
win10v2004-20221111-en
General
-
Target
73726860b4ba0f2d879b1b0659fb9a2a59002bd0a68ef3d88b86f6770efc37e5
-
Size
316KB
-
MD5
9221cddba34d926550ecea367b470143
-
SHA1
8f6c4042306bc868cbef118255432faf7f8a2413
-
SHA256
73726860b4ba0f2d879b1b0659fb9a2a59002bd0a68ef3d88b86f6770efc37e5
-
SHA512
a9d0e3a063832a4c34a7be74f83ddf4096c5c36476e365ab8d6015b6f083fe0f5883f3096015696aea8c4ab045b1562b29a4bd4edeec98d86b7ec04bd6308849
-
SSDEEP
6144:hlPJhmaHet3Mzs5S3nIqjHwoWYzE6GfZvZEQGglF9hvIBOBS:rJhpHiGemUviMZtGgdh5B
Malware Config
Signatures
Files
-
73726860b4ba0f2d879b1b0659fb9a2a59002bd0a68ef3d88b86f6770efc37e5.exe windows x86
e3cda74d8c01c7655479b443109122e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindow
CreateDialogIndirectParamA
FindWindowExA
IsWindow
MessageBoxExA
GetTopWindow
AnyPopup
GetSysColor
GetDlgItemInt
DispatchMessageA
OpenClipboard
GetClipboardData
GetWindowTextLengthA
BringWindowToTop
IsDialogMessageA
IsWindowUnicode
DeferWindowPos
CreateWindowExA
SetWindowTextA
gdi32
AngleArc
GetBitmapDimensionEx
Escape
CloseEnhMetaFile
DrawEscape
CreateFontW
EndPage
ExcludeClipRect
GdiFlush
CombineRgn
CreateDCW
CreateCompatibleBitmap
GetStockObject
comctl32
CreateToolbarEx
ord4
ord13
InitCommonControlsEx
CreatePropertySheetPageW
PropertySheetW
advapi32
NotifyChangeEventLog
OpenBackupEventLogW
RegSetValueA
OpenEventLogW
ClearEventLogA
RegQueryMultipleValuesA
RegRestoreKeyA
RegUnLoadKeyA
RegDeleteKeyA
RegisterEventSourceA
RegLoadKeyA
shlwapi
StrCmpNA
StrChrA
StrCSpnA
StrToIntA
kernel32
HeapCreate
PulseEvent
IsBadWritePtr
IsBadReadPtr
GetStartupInfoA
LocalSize
GetCPInfoExA
LocalFlags
GetProcessHeap
SetEvent
WritePrivateProfileStringA
GetPrivateProfileSectionA
GetProfileStringA
GetModuleHandleA
GetProcAddress
VirtualAllocEx
IsBadStringPtrA
netapi32
NetConfigGetAll
NetConfigSet
NetGetJoinableOUs
NetAuditClear
NetMessageNameDel
NetMessageBufferSend
NetWkstaUserGetInfo
NetGetAnyDCName
NetFileGetInfo
NetErrorLogWrite
Netbios
NetGetJoinInformation
NetConfigGet
NetGroupAdd
NetConnectionEnum
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
perror
iswctype
fscanf
ftell
fputs
fprintf
fputc
fseek
fsetpos
fopen
_flushall
free
_fullpath
fwrite
freopen
fread
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ