Static task
static1
Behavioral task
behavioral1
Sample
73942e3dbfeae1823e2b21dd46fdea258112efab9a446bda95bd5f4065d49ee3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73942e3dbfeae1823e2b21dd46fdea258112efab9a446bda95bd5f4065d49ee3.exe
Resource
win10v2004-20221111-en
General
-
Target
73942e3dbfeae1823e2b21dd46fdea258112efab9a446bda95bd5f4065d49ee3
-
Size
160KB
-
MD5
44b8e1c2a0d288074480be54e4a96cdf
-
SHA1
5067bd6761cbd15576fe26f78785ac3ff845fa24
-
SHA256
73942e3dbfeae1823e2b21dd46fdea258112efab9a446bda95bd5f4065d49ee3
-
SHA512
55868bf251cdd17f2d1f00d77eea0b856ca42306e564a038c93933c761c0ac993ad408073599599ab8fe18b0b0230adfc8a062ce8ea2ec7a348f68df2e3f99fd
-
SSDEEP
3072:Sh9MaD3uvSE6zqSE26+1CjVMJwgZFCX7f3OJB0kmONPsDZiy:ShP7uvSDqGTJNrCX7feJbOZiy
Malware Config
Signatures
Files
-
73942e3dbfeae1823e2b21dd46fdea258112efab9a446bda95bd5f4065d49ee3.exe windows x86
6e1b918def501da3c619940337398b00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GlobalAlloc
GetProfileStringA
GetFileSizeEx
CreateFileA
GetModuleFileNameA
GetTickCount
ExitProcess
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
user32
RegisterClassExA
msvcr80
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
_exit
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
_crt_debugger_hook
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
strcpy
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
__setusermatherr
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ