Static task
static1
Behavioral task
behavioral1
Sample
c72b44e501e3c42bd9d58aa5e376214b44d25e922809983f4d99183c1179aed7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c72b44e501e3c42bd9d58aa5e376214b44d25e922809983f4d99183c1179aed7.exe
Resource
win10v2004-20221111-en
General
-
Target
c72b44e501e3c42bd9d58aa5e376214b44d25e922809983f4d99183c1179aed7
-
Size
92KB
-
MD5
664ff97d89be511102fb1f34e8414e97
-
SHA1
816b68268846d2a0cc69664bc0ad3eb2a0afcda6
-
SHA256
c72b44e501e3c42bd9d58aa5e376214b44d25e922809983f4d99183c1179aed7
-
SHA512
45268392c7db0d869d8c8ee19158604b708818eec5c7cc2233433485ef59a70212360fb29a50bf32cb36a367972bd352969fc56078b3548448d679b7620f7711
-
SSDEEP
1536:O7ao5tO+suVIfBBnVwooHbyILtjxyCgoV23QFr9ooJlIU:OPwKSBnVw/y6dUQB9ooJlIU
Malware Config
Signatures
Files
-
c72b44e501e3c42bd9d58aa5e376214b44d25e922809983f4d99183c1179aed7.exe windows x86
93c456ff2f6d70d8aa0634f517de9884
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
user32
wsprintfA
MessageBoxA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
DestroyWindow
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
gdi32
Rectangle
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ