Static task
static1
Behavioral task
behavioral1
Sample
73fac9464c13dc787e27c42c6ad209c55d30adda5bec7754a44e4f03e8976761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73fac9464c13dc787e27c42c6ad209c55d30adda5bec7754a44e4f03e8976761.exe
Resource
win10v2004-20220812-en
General
-
Target
73fac9464c13dc787e27c42c6ad209c55d30adda5bec7754a44e4f03e8976761
-
Size
769KB
-
MD5
da93325ffd14ea449e2aec07484bd12e
-
SHA1
f5a452f939e97be38c8d1442d0b229dfa1e4732f
-
SHA256
73fac9464c13dc787e27c42c6ad209c55d30adda5bec7754a44e4f03e8976761
-
SHA512
e7373fef1633170413e740c93d134720ac4350c180883c4b2f3639cea67251622300abb20bf54745b696b97a5982bc1f002e8119501146337991818705d4768f
-
SSDEEP
24576:91hjtDpnRxJfepDrmoYtscOhJKzZWOq6Izdb:9bt9nxEioQ6J
Malware Config
Signatures
Files
-
73fac9464c13dc787e27c42c6ad209c55d30adda5bec7754a44e4f03e8976761.exe windows x86
ef0d76b884e7d1125f3a7d1722a4b6a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
GetTickCount
SetEvent
GetCommandLineA
GetModuleHandleA
GetExitCodeProcess
Sleep
GlobalFlags
CloseHandle
SetConsoleCP
CloseHandle
IsBadStringPtrA
IsBadCodePtr
lstrlenW
SetFilePointer
GlobalSize
GetStartupInfoA
WriteFile
DeleteFileA
ReleaseMutex
user32
GetWindowLongW
DispatchMessageA
GetParent
SetFocus
FillRect
DispatchMessageA
CallWindowProcW
IsWindowVisible
BeginPaint
DestroyWindow
LoadImageA
PeekMessageA
DrawTextW
ir41_qc
Compress
Compress
Compress
Compress
wininet
FtpCommandW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 762KB - Virtual size: 761KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ