Static task
static1
Behavioral task
behavioral1
Sample
73506e0b87c3e2d5d8c00edb3111ec6542e52315c76bf0d98e6e844e58b4b392.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
73506e0b87c3e2d5d8c00edb3111ec6542e52315c76bf0d98e6e844e58b4b392.exe
Resource
win10v2004-20220812-en
General
-
Target
73506e0b87c3e2d5d8c00edb3111ec6542e52315c76bf0d98e6e844e58b4b392
-
Size
60KB
-
MD5
01d79979b2c95585d27b0a70887d870d
-
SHA1
23a4d931bf88c5eb1fde114ab9504d48eb5c5cb4
-
SHA256
73506e0b87c3e2d5d8c00edb3111ec6542e52315c76bf0d98e6e844e58b4b392
-
SHA512
4b6173b045a528a25c37b36a58759c462d1fd913b66a7d0b933e0d687180f1ce1ce3ffc0b0637ba3d15850756d7049d699c7ed21657f1a198a8cfcfb38bd3ff9
-
SSDEEP
1536:Sx0g6OidyXUVeupQZRzoIsyAPvto583z7IcL6q73oEp:Sxr6PyErpesrve83oTqLoA
Malware Config
Signatures
Files
-
73506e0b87c3e2d5d8c00edb3111ec6542e52315c76bf0d98e6e844e58b4b392.exe windows x86
56fe45546e2b14dae3ee5ab805298c8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockFileEx
WaitForSingleObjectEx
GetTimeZoneInformation
WinExec
GetProcAddress
ExitProcess
GetCurrentProcess
GetExitCodeThread
GetLocalTime
CopyFileA
GetSystemTimeAsFileTime
GetVersionExA
TlsAlloc
SystemTimeToFileTime
OutputDebugStringA
lstrlenA
GetOverlappedResult
LoadResource
GetCurrentDirectoryA
GetTempPathA
LoadLibraryA
GetCurrentProcessId
GetModuleHandleA
GlobalLock
CreateFileMappingA
FindNextFileA
GetStdHandle
HeapCreate
MoveFileA
lstrcmpiA
QueryPerformanceCounter
VirtualAlloc
InitializeCriticalSection
WritePrivateProfileStringA
GlobalUnlock
WriteFileEx
DeviceIoControl
SetStdHandle
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapDestroy
VirtualFree
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ